ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.221.199.206:12345.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1686159
IOC: 185.221.199.206:12345
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Bashlite
Malware alias:gayfgt, Gafgyt, qbot, torlus, lizkebab
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS9009 M247
Country:- RO
First seen:2025-12-25 07:57:28 UTC
Last seen:2026-01-01 22:54:38 UTC
UUID:5bfd6b51-e167-11f0-9957-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:Gafgyt
Reference: https://bazaar.abuse.ch/sample/b7e3744783f2ab4901e2e0e62d8259115e54f2b6af934e8dd2df20c9c5db5432/