ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 104.168.44.52:80.

Database Entry


IOC ID:290710
IOC: 104.168.44.52:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS36352 AS-COLOCROSSING
Country:- US
First seen:2022-01-03 13:42:24 UTC
Last seen:2023-08-01 17:56:11 UTC
UUID:fbe698de-6c9a-11ec-8ab6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-02-05 11:26:29 7fa24025283e6b745f20c81e15a8cdb866905fb079579b71efd9e659398cb574
2022-01-03 13:46:17 bee97bf24d36f6b85ab369e34ceb639d703dc61e8e012bbc781d69f1dd695ff0
2022-01-03 13:42:27 0bc78b7c85f56566d4a7d5698935a3b4147648588cda45ee1b320fc2489f4c4d