ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.30:57375.

Database Entry


IOC ID:1566599
IOC: 147.185.221.30:57375
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-08-09 02:55:15 UTC
Last seen:2025-08-15 12:12:44 UTC
UUID:46e31a75-74cc-11f0-851c-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from 01Xyris
50 credits from anonymous
10 credits from netresec
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-09 16:30:34 fc53884a4452b6f808e280dc3fc3a051d0129be2aabf61ea816dacf6c3ea9e80
2025-08-09 03:10:19 1282128d901c2381bf43222b8952e2d7f4cf0dbad4e9b0dd5a29a4eddfb56e46
2025-08-09 02:55:18 1f4fce1da15f3dc8063a427ff2af18556dda4620b4082a47c6a9436c047d5e8c