🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 8.148.27.183:12325.

Database Entry


IOC ID:1976679
IOC: 8.148.27.183:12325
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS37963 ALIBABA-CN-NET
Country:- CN
First seen:2026-10-20 23:15:06 UTC
Last seen:never
UUID:1680bc00-ccdc-11f1-8fc0-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-10-21 00:55:11 d65e2eb84444c69bc58ea794056f7d2b00f517a484efbf62f6e10e4bfc15c585
2026-10-20 23:15:11 6bba006161f3d18b18495b329961b76ec1a6ad6e7595c6b74e86f961049d5370