ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.200.191.18:80.

Database Entry


IOC ID:388114
IOC: 185.200.191.18:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RedLine Stealer
Malware alias:RECORDSTEALER
Confidence Level : Confidence level is high (100%)
ASN:AS204154 FIRST-SERVER-US-AS
Country:- RU
First seen:2022-02-16 07:35:57 UTC
Last seen:2025-08-08 12:01:18 UTC
UUID:14b6754b-8efb-11ec-a022-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RedLineStealer

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-02-16 07:51:05 24fe35fea083b89f0cc62ef8b9df0de29395be57b0ee1b160229d667785b6bf0
2022-02-16 07:35:58 03d7bb6de28f63752921367619ad44ca420c80352e96e8aeda734c28ca63557f