🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 212.83.185.19:80.

Database Entry


IOC ID:1982217
IOC: 212.83.185.19:80
IOC Type :ip:port
Threat Type :payload_delivery
Malware: XMRIG
Confidence Level : Confidence level is high (95%)
Is compromised? : False
ASN:AS12876 AS12876
Country:- FR
First seen:2026-10-23 16:57:39 UTC
Last seen:never
UUID:1eeed440-ceff-11f1-a74e-42010aa4000a
Reporter ukkz
Reward 5 credits from ThreatFox
Tags:cryptojacking CVE-2026-110447 nextcloud scaleway
Reference: https://wz-it.com/en/blog/nextcloud-built-in-code-server-cve-2026-110447-rce-webshell/

Avatar
ukkz
Malware distribution server. Scaleway Dedibox hosting attacker-controlled web paths /bottom-*.png and /footerd.png. Note: TLS cert on 443 is for a legitimate telecom service subdomain whose server appears to be compromised and repurposed.