ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 45.61.136.135:443.

Database Entry

This IOC is of poor quality

Our automated checks indicate that this IOC is of poor quality. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.

IOC ID:	1890885
IOC:	45.61.136.135:443
IOC Type :	ip:port
Threat Type :	payload_delivery
Malware:	Unknown malware
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS399629 BLNWX
Country:	NL
First seen:	2026-08-29 05:55:00 UTC
Last seen:	never
UUID:	edf3e63f-a346-11f1-9e13-42010aa4000a
Reporter	LinkusBlame
Reward	5 credits from ThreatFox
Tags:	BL-Networks bulletproof-hosting cybercartel mexico web-inject

LinkusBlame

Actor-controlled server hosting the web-inject endpoint https://facturacionmexico.net/ok.js (ThreatFox 1887883/1887885). Registrant BL Networks, AS399629, block BLNETWORKS-01. In the whole public history of this address there are only TWO domains and both belong to this campaign, so it is dedicated infrastructure rather than shared hosting. The same registrant also owns the block holding the May-generation host 64.95.13.65 (BNL-77) - two different blocks, one sustained hosting relationship across two generations of the campaign. CrowdSec CTI reports the surrounding subnet as malicious. Port 443 is evidenced by the https URL it served.