ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 129.208.2.161:995.

Database Entry


IOC ID:254397
IOC: 129.208.2.161:995
IOC Type :ip:port
Threat Type :botnet_cc
Malware: QakBot
Malware alias:Pinkslipbot, Qbot, Quakbot
Confidence Level : Confidence level is elevated (75%)
First seen:2021-11-25 15:42:56 UTC
Last seen:never
UUID:5c57f285-4e06-11ec-8ab6-42010aa4000a
Reporter @abuse_ch
Reward 5 credits from ThreatFox
Tags:QakBot
Reference: https://bazaar.abuse.ch/sample/1bd05fa8f24239e9cbbd41f7ee86d6a66261dcf294232b418870d4a3390dff54/

Twitter
@abuse_ch
qakbot (aka Pinkslipbot,Qbot,Quakbot) botnet C2