ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.10.68.122:80.

Database Entry


IOC ID:1884162
IOC: 185.10.68.122:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS200651 FlokiNET
Country:- IS
First seen:2026-08-22 09:03:39 UTC
Last seen:never
UUID:88f30a20-9dfc-11f1-a7c1-42010aa4000a
Reporter denia
Reward 5 credits from ThreatFox
Tags:aarch64 c2 elf fake-systemd golang linux

Avatar
denia
Statically linked ARM64 Golang C2 beacon disguised as systemd-helper (/usr/sbin/systemd-helper) via rogue systemd unit systemd-journal-sync.service