ThreatFox IOC Database
You are viewing the ThreatFox database entry for ip:port 194.5.97.122:3394.
Database Entry
This IOC expired
This IOC is an old IOC and hence has expired on 2026-06-04 01:15:01 UTC. We therefore refrain from exporting it into our datasets. As a result, this database entry is purely informational and has no impact.
| IOC ID: | 217480 |
|---|---|
| IOC: | 194.5.97.122:3394 |
| IOC Type : | ip:port |
| Threat Type : | botnet_cc |
| Malware: | NetWire RC |
| Malware alias: | NetWeird, NetWire, Recam |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| ASN: | AS149020 WEBHORIZON-AS-AP |
| Country: |  IN |
| First seen: | 2021-09-07 20:41:03 UTC |
| Last seen: | never |
| UUID: | eb3dff7f-101b-11ec-830d-42010aa4000a |
| Reporter |  AndreGironda |
| Reward | 5 credits from ThreatFox |
| Tags: | NetWire |
| Reference: | https://tria.ge/210907-y8hajsgedj |
AndreGironda
MITRE T1566.001Date: Fri, 3 Sep 2021 14:00:14:30 -0700
Received: from sourceoneenterprisesus.com (66.84.10.14)
From: "ACCOUNT"<account@mweb.co.za>
Subject: PROOF OF PAYMENT
Reply-To: <hjfanels@gmail.com>
Message-ID: <315e357d-c54e-41bd-b90d-09ce039c9f27@DM6NAM11FT063.eop-nam11.prod.protection.outlook.com>
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Attachment Name: Proof Of Payment.docx
Attachment SHA256: 573d4f8505e61c19238ed89188ec3054769f8875d0ab6a83b23ff2a00661b9fe