ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 181.216.32.18:6000.

Database Entry

IOC ID:	1577692
IOC:	181.216.32.18:6000
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	XWorm
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS28573 Claro_NXT_Telecomunicacoes_Ltda
Country:	BR
First seen:	2025-08-29 13:15:12 UTC
Last seen:	2025-09-13 11:43:49 UTC
UUID:	31cfc05f-84da-11f0-bfa6-42010aa4000a
Reporter	abuse_ch
Reward	50 credits from anonymous 10 credits from 01Xyris 50 credits from anonymous 10 credits from netresec 10 credits from akanine1337 10 credits from Saber
Tags:	XWorm

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).