🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 45.198.224.91:6541.

Database Entry


IOC ID:1973494
IOC: 45.198.224.91:6541
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (85%)
Is compromised? : False
ASN:AS215925 VPSVAULTHOST
Country:- BR
First seen:2026-10-19 06:20:29 UTC
Last seen:never
UUID:ca9fac26-cb1c-11f1-bd13-42010aa4000a
Reporter Darkfibr
Reward 5 credits from ThreatFox
Tags:elf onlycn ROOTKIT

Avatar
Darkfibr
Family unresolved. Artifact-embedded name: onlycn. Hardcoded C2 in cl-amd64 sockaddr (port 0x198d); length-prefixed command channel, SYN/UDP flood or /bin/sh.