🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 3.142.81.166:17899.

Database Entry


IOC ID:440919
IOC: 3.142.81.166:17899
IOC Type :ip:port
Threat Type :botnet_cc
Malware: NjRAT
Malware alias:Bladabindi, Lime-Worm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS16509 AMAZON-02
Country:- US
First seen:2022-03-23 01:11:52 UTC
Last seen:never
UUID:392d71c1-aa46-11ec-8129-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:njrat

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2022-03-23 02:27:06 62e70a8b9956e07e1e02b4064e3ae9bbc754aee5912d1d5c4e10629847b2e0df
2022-03-23 01:16:58 2352281131b231a158f61158a6c93210714685060803d5b02e8a875e0e91c129
2022-03-23 01:11:53 2ec90df668caec1d94c3d787e8fd915567888788938e14ca0a86dcda9c8124eb