ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 172.245.209.204:3535.

Database Entry


IOC ID:1596830
IOC: 172.245.209.204:3535
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
ASN:AS36352 AS-COLOCROSSING
Country:- US
First seen:2025-09-22 06:30:16 UTC
Last seen:never
UUID:9a777209-977d-11f0-bfa6-42010aa4000a
Reporter abuse_ch
Reward 50 credits from anonymous
10 credits from netresec
10 credits from akanine1337
10 credits from Saber
Tags:XWorm

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-09-23 00:35:10 f81a80a1253af14c000762bab41208a7664b5c7153104c8ec3d93072b80528e5
2025-09-22 12:00:31 6d1482246540a4952079125b87176149a72fe0b36f62af7f897065808a1c5c8d
2025-09-22 09:20:15 55a5c3b6084f0f2a9a0cbaf16e3beb16ebcc01c5aec853813154744fe7f7f6fe
2025-09-22 06:30:18 5df3d8015e5455e562f438a9540b8ed45d8fae27ac5ebd37cbd3074a60d09edb