ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 198.135.49.120:3281.

Database Entry


IOC ID:1567634
IOC: 198.135.49.120:3281
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS396073 MAJESTIC-HOSTING-01
Country:- US
First seen:2025-08-12 08:15:32 UTC
Last seen:never
UUID:8412bf77-7754-11f0-851c-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from 01Xyris
50 credits from anonymous
10 credits from netresec
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-12 21:45:23 bb4bb43da97cf6ce8953d1000f9f292c38f13492e6f959f7a8e1c24919d102b0
2025-08-12 08:15:34 65a965dcf98797a98ecbfb510193d1987631d4107417f97e292d17356182ad5f