s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-1931053 high

📛 Threat Title

DanaBot: ip:port combination that is used for botnet Command&control (C&C) 37.244.231.39:4433

Category: DanaBot Published: Source updated: First seen: Last updated: Source: Threatfox IOCs/Threats

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: DanaBot (aliases: DanaTools). Confidence: 75. Observed port: 4433. First seen: 2026-09-23 19:46:28 UTC. Last seen: 2026-09-23 23:45:54 UTC. Reporter: abuse_ch. Tags: DanBot, drb-ra.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

ipv4 37.244.231.39 VT 3 / 89

IOC database

Type
ipv4
Value
37.244.231.39
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
ip:port combination that is used for botnet Command&control (C&C) attributed to DanaBot

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Flagged by 3 of 89 VirusTotal vendors

VendorVerdictDetection
CRDF malicious malicious
Fortinet malicious malware
SOCRadar suspicious suspicious

Details From VirusTotal

Basic Properties
Network37.244.128.0/17
CountryHR
AS ownerA1 Hrvatska d.o.o.
ASN12810
Regional registryRIPE NCC
History
Last analysis2026-09-23 21:46 UTC
Last modified on VirusTotal2026-09-23 23:55 UTC

References (2)

  • Malpedia profile Threatfox IOCs/Threats
  • ThreatFox IOC page Threatfox IOCs/Threats

    Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: DanaBot (aliases: DanaTools). Confidence: 75. Observed port: 4433. First seen: 2026-09-23 19:46:28 UTC. Reporter: abuse_ch. Tags: DanBot, drb-ra.

Remediations (2)

  • web:hub.fortinet.com

    We would like to show you a description here but the site won't allow us.

  • web:indiancyberclub.com

    We would like to show you a description here but the site won't allow us.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

VirusTotal Information

loading…

IP Geolocation

Loading…