ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 172.245.93.107:2214.

Database Entry


IOC ID:1614319
IOC: 172.245.93.107:2214
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS36352 AS-COLOCROSSING
Country:- US
First seen:2025-10-13 18:01:17 UTC
Last seen:2025-10-20 13:35:15 UTC
UUID:9d8e42a9-a85e-11f0-894e-42010aa4000a
Reporter DonPasci
Reward 10 credits from akanine1337
10 credits from Saber
Tags:AS36352 c2 triage XWorm
Reference: https://tria.ge/251013-r12kwsyygy

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-10-16 18:55:11 0f425d11e80b7cf493fb42d4f4866efb68169d3c5b1a90af93ceef9a82649b5f
2025-10-15 23:40:10 0794dde51a3d0c0c712fa764940be7ff12b83e73ffe33ac9c5d0847fc50d9075