ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 95.216.64.240:1224.

Database Entry


IOC ID:1851322
IOC: 95.216.64.240:1224
IOC Type :ip:port
Threat Type :botnet_cc
Malware: InvisibleFerret
Confidence Level : Confidence level is high (85%)
Is compromised? : True
ASN:AS24940 HETZNER-AS
Country:- DE
First seen:2026-07-16 04:25:36 UTC
Last seen:never
UUID:a7ac5f7c-809f-11f1-97fa-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:ContagiousInterview DPRK InvisibleFerret Lazarus

Avatar
Anonymous
DPRK Contagious Interview / InvisibleFerret cluster, observed live July 2026. Tron dead-drop TUS6fj1ZcsZVdGtPspVNH9jY4yqywHaHDm -> BSC -> resolver 95.217.102.138:1144 -> C2 95.216.64.240:1224 -> Cloudflare R2 payloads. Persistence PyToolUpdater. Red Asgard threat-hunting 2026-07-15.