ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.229:50473.

Database Entry


IOC ID:1626426
IOC: 147.185.221.229:50473
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-10-25 09:35:04 UTC
Last seen:never
UUID:e3270bad-b185-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-25 14:40:09 cddc1c5ff10c08b4a896503acb1cf7745e3adf7b0f9a60d4b2435125d7f0108d
2025-10-25 09:35:07 39fdd742df6bfcf32a04c46dcbcda4a12c630506a4208a43251804f4ec05c520