🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 64.188.67.232:7000.

Database Entry


IOC ID:1997966
IOC: 64.188.67.232:7000
IOC Type :ip:port
Threat Type :botnet_cc
Malware: XWorm
Confidence Level : Confidence level is moderate (50%)
Is compromised? : False
ASN:AS215439 PLAY2GO-NET
Country:- RU
First seen:2026-10-28 06:35:59 UTC
Last seen:never
UUID:69ca0b46-d239-11f1-a74e-42010aa4000a
Reporter 7H40
Reward 10 credits from Saber
Tags:c2 RAT XWorm
Reference: https://www.virustotal.com/gui/file/c4a943df1d073bb3e918d69dd79c1f7b1e7681ae495cce100bf341ebcb4657c3

Avatar
7H40
Active XWorm RAT C2 server extracted from runtime memory analysis. Port 7000 TCP is verified open and active.