TF-1858524
high
📛 Threat Title
Unknown malware: ip:port combination that is used for botnet Command&control (C&C) 45.205.1.36:44510
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 75. Observed port: 44510. First seen: 2026-07-26 16:01:31 UTC. Reporter: abuse_ch. Tags: IranBot, vibenet.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
45.205.1.36
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/ip_addresses/45.205.1.36
1 feed
IOC database
- Type
- ipv4
- Value
45.205.1.36- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Imported from threat-intel feed: Ipsum
Threat Hunt — feed corroboration
Listed by 1 threat-intel feed vendor: Ipsum. Open in Threat Hunt →
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/ip_addresses/45.205.1.36
References (3)
- External reference ThreatFox IOCs
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 75. Observed port: 44510. First seen: 2026-07-26 16:01:31 UTC. Reporter: abuse_ch. Tags: IranBot, vibenet.
Remediations (10)
-
web:cybersec.picussecurity.com
We would like to show you a description here but the site won't allow us.
-
web:executivegov.com
ExecutiveGov
-
web:intezer.com
IPStorm now with Linux malware is the latest example of a cross-platform malware developed in Golang. Platforms that are compromised by IPStorm are not only exposed to a backdoor to their services but are also added to the IPStorm Botnet which attempts to spread to other victims.
-
web:staysafeonline.org
Botnets Botnets are networks of computers infected by malware (such as computer viruses, key loggers and other malicious software) and controlled remotely by criminals, usually for financial gain or to launch attacks on websites or networks.
-
web:www.kasada.io
Bot management can be challenging for businesses, as bots are looking and acting like humans now more than ever before. They are blending in with traffic and evading traditional bot detection methods at an alarming rate. Today, we are sharing: Who is behind bad bots? Why bad bots are so difficult to detect What is bot detection? And why is it important? How to detect bot traffic and bot ...
-
web:www.kasada.io
Notable Botnet Attack Types Botnets are typically used to carry out spam and phishing attacks, DDoS attacks, and financial and data breaches. Each type of attack presents substantial risks to both individuals and organizations, and understanding these attack types is vital for implementing effective countermeasures.
-
web:www.paloaltonetworks.com
301 Moved Permanently Moved Permanently The document has moved here.
-
web:www.researchgate.net
A botnet is a network of remotely controlled, compromised computers, used for mali- cious purposes. Every infected host in a botnet is called 'Bot' and the owner is called 'Botmaster'.
-
web:www.techmonitor.ai
Tech Monitor - Navigating the horizon of business technology .
-
web:www.trendmicro.com
One notable characteristic we rarely see in malware is leveraging WebSocket communication to the C&C servers for an efficient bidirectional channel between the infected client and the server. WebSocket is a communication technology that supports streams of data to be exchanged between a client and a server over just a single TCP session.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.