ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 213.232.235.51:8880.

Database Entry


IOC ID:1854927
IOC: 213.232.235.51:8880
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ClearFake
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS200019 AlexHost
Country:- MD
First seen:2026-07-21 13:29:42 UTC
Last seen:never
UUID:3b01486f-8508-11f1-8973-42010aa4000a
Reporter threatcat_ch
Reward 10 credits from dinesh_Infosec
10 credits from anonymous
Tags:ClearFake ScreenConnect

Avatar
threatcat_ch
ClearFake variant via mshta => download and install of ScreenConnect, which will connect to kori1903.anondns.net / 213.232.235.51 on port 8880