ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 165.227.199.109:8539.

Database Entry


IOC ID:1884159
IOC: 165.227.199.109:8539
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remus
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS14061 DIGITALOCEAN-ASN
Country:- US
First seen:2026-08-22 09:03:33 UTC
Last seen:2026-08-24 11:25:24 UTC
UUID:372de708-9df8-11f1-a7c1-42010aa4000a
Reporter Bitsight
Reward 5 credits from ThreatFox
Tags:6efb1e0ab361cda1dd534e37e543789c c2 Remus

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-08-23 15:00:19 3c6126417211aacd1bb0ebadcd474747890e8930a4684ccabe448d1390b3c064
2026-08-23 14:50:13 848939e80154d4ac60f31782bb0ed6ce5fd27faea14ac8fd489fd5b250b4ab1a
2026-08-23 14:30:37 d63e71109ca0a304312ddc21def555dc9f73c71ddae8d7bcd6f94a189a2d8f0b
2026-08-23 14:30:36 803af293617ebe93de009614e1b029fa7bd07616e9c1dda0019fd6c69fe409e6
2026-08-23 14:30:35 fc0553851d495ff5b6aba8c8d472f210f5c5d7ac05dcb56c27c61941eaa3b7ea
2026-08-23 14:30:34 f8a8576198303af9265eb685b929b7df6cc77bfde1ee1cde8857ccf5b03fd257
2026-08-23 14:30:32 077823195d63d536187ea1f0e19a2a8971b2d63cdf2878737874adf49d1b60c6
2026-08-23 14:30:27 f2d9aa36fb92a0a6da0c9f81c7a8dd4d0e01fd4906413a94b25720dd419be483
2026-08-23 14:30:25 20082d2052d2d406bb4193990d933dc9b78bf2ccc3f2618144ada1fb7e0a995e
2026-08-23 14:30:24 06c363461edf2a8ef254ca27daa8e243413d0303553d094e78c29c01501e9941