ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 136.243.32.168:443.

Database Entry


IOC ID:794941
IOC: 136.243.32.168:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Emotet
Malware alias:Geodo, Heodo
Confidence Level : Confidence level is elevated (75%)
ASN:AS24940 HETZNER-AS
Country:- DE
First seen:2022-07-04 17:46:11 UTC
Last seen:2022-10-14 20:19:08 UTC
UUID:315055cb-fbc1-11ec-a01e-42010aa4000a
Reporter abuse_ch
Reward 10 credits from DarkoZupan
Tags:emotet
Reference: https://bazaar.abuse.ch/sample/6fc29cee6754fe79ad16a2d1df7eccd43798c9a1bf4dad634cbd7697700c154e/

Avatar
abuse_ch
emotet (aka Geodo,Heodo) botnet C2