ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 91.236.230.229:5000.

Database Entry


IOC ID:1778233
IOC: 91.236.230.229:5000
IOC Type :ip:port
Threat Type :botnet_cc
Malware: BumbleBee
Malware alias:COLDTRAIN, SHELLSTING, Shindig
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS62005 BV-EU-AS
Country:- EE
First seen:2026-03-29 14:01:10 UTC
Last seen:never
UUID:6150cbc3-2b1d-11f1-9af6-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:BlueVPS BUMBLEBEE IAB
Reference: https://www.virustotal.com/gui/ip-address/91.236.230.17

Avatar
Lenny_3BO
Bumblebee IAB infrastructure on BlueVPS AS62005. Mailcow phishing, staging, device dashboard.