ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 216.250.252.39:2525.

Database Entry


IOC ID:1590672
IOC: 216.250.252.39:2525
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS396073 MAJESTIC-HOSTING-01
Country:- US
First seen:2025-09-15 16:55:17 UTC
Last seen:2025-09-17 10:27:46 UTC
UUID:c1f26066-9254-11f0-bfa6-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from netresec
10 credits from akanine1337
10 credits from Saber
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-09-15 16:55:20 ea00a2a36ddf65471905637823a6932267ba2ebc36620aa82deaa652ec17334a