🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 143.244.130.3:6527.

Database Entry


IOC ID:1927312
IOC: 143.244.130.3:6527
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remus
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS14061 DIGITALOCEAN-ASN
Country:- US
First seen:2026-09-22 11:00:28 UTC
Last seen:2026-09-24 00:30:43 UTC
UUID:1cdd29cd-b673-11f1-abee-42010aa4000a
Reporter Bitsight
Reward 5 credits from ThreatFox
Tags:5a4378fb90db39f09c7b18d1f314e645 c2 Remus

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-09-22 19:00:14 1aeb28c3bcf09cd18db9d0f937beb536bb0c0419c4c22665c009f390e8c6df25