🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.229:57225.

Database Entry


IOC ID:1611431
IOC: 147.185.221.229:57225
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-10-10 12:25:11 UTC
Last seen:never
UUID:2a5af5f4-a5d4-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 10 credits from netresec
10 credits from akanine1337
10 credits from Saber
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-10 13:15:19 0481319884912b592c044a34d27adfe05f31e907b9ec1da8f0fb404a08d8e985
2025-10-10 13:10:15 dd75cc88ee0eec0ac597d5e7bc61ab3928cdcfa24793698d8c8cdff044217ab9
2025-10-10 13:05:15 0b8b59bcd440fdc4530e8c1eb81ce60c1cbcb85a2d1d2af42d421963f5301681
2025-10-10 13:00:21 732bcada3d499b00933072d1ecce2a1da13edc739682c763f174d22dfd36ed89
2025-10-10 12:55:14 2ab4615b4ddb17fc1acacdf20d5923342cc7f40b658a725cbe8dfd19909d5f5f
2025-10-10 12:25:13 331fc1a9efcb3383e1cf76627db0222ebed6cec4a1d1f4a6f460ecd8072c7df2