ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.246.87.50:1389.

Database Entry


IOC ID:277957
IOC: 185.246.87.50:1389
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Tsunami
Malware alias:Muhstik, Radiation, Amnesia
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS21409 IKOULA
Country:- FR
First seen:2021-12-20 10:21:39 UTC
Last seen:2021-12-21 22:21:55 UTC
UUID:9ec6c99c-617e-11ec-8ab6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:CVE-2021-44228 log4j Muhstik rogue-ldap

Avatar
abuse_ch
Rogue LDAP server used in log4j (CVE-2021-44228) exploitation attempts