🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 104.245.245.146:5203.

Database Entry


IOC ID:1990459
IOC: 104.245.245.146:5203
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Ave Maria
Malware alias:AVE_MARIA, AveMariaRAT, Warzone RAT, WarzoneRAT, avemaria
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS201814 Mevspace
Country:- PL
First seen:2026-10-26 08:02:47 UTC
Last seen:never
UUID:a1920e9d-d113-11f1-a74e-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:AveMariaRAT RAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-10-27 00:30:14 0d11c4b0ed5b1235e2ab8aa7ab41302acd686617a007157278eb4e58847ab2b2
2026-10-26 22:55:16 81c92a9a346f7db12a0fef04bf0f05d30a6b0e85e73b2b61ef8cc1c8e04e77e2