ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 196.251.69.82:49002.

Database Entry


IOC ID:1554259
IOC: 196.251.69.82:49002
IOC Type :ip:port
Threat Type :botnet_cc
Malware: N-W0rm
Malware alias:nw0rm, NWorm
Confidence Level : Confidence level is high (100%)
ASN:AS401120 CHEAPY-HOST
Country:- US
First seen:2025-07-07 16:55:31 UTC
Last seen:never
UUID:3102e3f7-5b53-11f0-a7f6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:N-W0rm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-07-08 08:20:41 3d2825c13fc111fc1678c4f93996c7694a8c51562b34c60b112172fec83fb0ef
2025-07-07 17:25:41 f6dddb9ef4030810b65dd4523449697042412ea1c3b231f29711a8e2eb06f204
2025-07-07 16:55:34 41fcd7bee5377448a167c93035ea0644569b8b15f5a3b39c3cd20a8a858a3393