ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.30:56685.

Database Entry


IOC ID:1565838
IOC: 147.185.221.30:56685
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-08-07 16:40:26 UTC
Last seen:never
UUID:3880334d-73ad-11f0-851c-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from 01Xyris
50 credits from anonymous
10 credits from netresec
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-08 09:15:24 f3dcd3b6d452657247936a87c06e2bef42261a46035453d58ff0c7d1106e8393
2025-08-07 16:40:28 381247736e2e792fc28122137b04813f5a052cc7bed47364019fc488c9cad2f3