ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.185.221.212:58261.

Database Entry


IOC ID:1627013
IOC: 147.185.221.212:58261
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS400519 PLAYIT-GG
Country:- US
First seen:2025-10-26 17:00:04 UTC
Last seen:never
UUID:378b770d-b28d-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-26 17:20:04 6e6f89821d980d1305a0f7a333e529fdb212b10ffcd8e11c32d9a36f3326458e
2025-10-26 17:00:08 2f291eb67cbc8afd88280ca55e6986398defe0d76784356e3f6a51882cf282aa