ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 38.242.157.137:7242.

Database Entry


IOC ID:1876187
IOC: 38.242.157.137:7242
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remus
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS51167 CONTABO
Country:- DE
First seen:2026-08-15 00:35:51 UTC
Last seen:2026-08-21 12:00:38 UTC
UUID:44b38d5b-9841-11f1-8a3d-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Remus
Reference: https://bazaar.abuse.ch/sample/514fa7786356f49ad0e1164fec6fcfb3c2759db9c069beac2f89baa804f7d5fe/

Avatar
abuse_ch
remus botnet C2 at http://palaera.click:7242/workspaces resolving to 38.242.157.137:7242

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-08-21 11:55:15 b4ebdf938bd45a11dc5d139bee18e7692e5c98c7511af9026558ef7d281d8c33
2026-08-20 18:45:19 75b78d8c29a3dbe369c38cff68dcd8a509f88fbdc5af1aac2d3684a3f2c3207e
2026-08-20 18:45:18 178fd830163f46b127955422415f10d5f5a337212940ecfbb16f715b8ab2a711