ThreatFox IOC Database
You are viewing the ThreatFox database entry for ip:port 199.247.14.16:80.
Database Entry
| IOC ID: | 1810434 |
|---|---|
| IOC: | 199.247.14.16:80 |
| IOC Type : | ip:port |
| Threat Type : | botnet_cc |
| Malware: | Unknown malware |
| Confidence Level : | Confidence level is moderate (50%) |
| Is compromised? : | False |
| ASN: | AS20473 AS-VULTR |
| Country: |  US |
| First seen: | 2026-05-10 21:36:57 UTC |
| Last seen: | never |
| UUID: | 5ec517dd-4cb8-11f1-8759-42010aa4000a |
| Reporter |  Gi7w0rm |
| Reward | 5 credits from ThreatFox |
| Tags: | ChromeExtension glassworm RAT |
| Reference: | https://www.aikido.dev/blog/glassworm-chrome-extension-rat |
Gi7w0rm
Config string:> Program logged: "Memo (len 108): "{\"c2server\":\"http://199.247.14[.]16:5000\",\"checkIp\":\"https:///199.247.14[.]16\",\"dht_data\":\"199.247.14[.]16:10000\"}""