ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 196.251.88.245:7805.

Database Entry


IOC ID:1628007
IOC: 196.251.88.245:7805
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
ASN:AS401120 CHEAPY-HOST
Country:- US
First seen:2025-10-28 09:10:07 UTC
Last seen:2025-11-07 12:55:38 UTC
UUID:e60783e9-b3dd-11f0-894e-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-28 11:35:10 1d03bf975d8312c7578ceb8f9c8c9d471196806810613aaef602fb6bca22c022
2025-10-28 09:10:10 bfc67c5bc98de4693e91dd9ccff75b01eed7f8148341f721b2e8dc78da54891a