ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.30:60258.

Database Entry


IOC ID:1567262
IOC: 147.185.221.30:60258
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-08-11 11:00:35 UTC
Last seen:2025-08-15 22:23:07 UTC
UUID:6845518c-76a2-11f0-851c-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from 01Xyris
50 credits from anonymous
10 credits from netresec
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-11 11:10:26 a1ca3ec0f2943796aae7d3476c7a88c763daf0d5fe700f40978aea892c4820fb
2025-08-11 11:00:37 469352f730e8387bfcdcc4b398c56c07fa9e9ad4c6dcaa6cc69f99d66c01b533