ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 196.251.88.235:50084.

Database Entry


IOC ID:1613365
IOC: 196.251.88.235:50084
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
ASN:AS401120 CHEAPY-HOST
Country:- US
First seen:2025-10-13 08:55:03 UTC
Last seen:2025-10-22 12:44:13 UTC
UUID:4ea8fb98-a812-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-14 05:50:10 c5efa587fe489673591d0de5da8a67a0a558339ce0ac6de7ade6d623ba104e2f
2025-10-14 05:10:08 14414264593e79ab0c9c313398fa15fceb763616e6bea0a1c3ebddf2a117a8ab
2025-10-13 08:55:05 289dec46e22ecce04d8067211739d685d1d807895a4894da0ede93d8804d0b53