TF-1929641
high
📛 Threat Title
Havoc: ip:port combination that is used for botnet Command&control (C&C) 5.78.212.208:22
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Havoc (aliases: Havokiz). Confidence: 100. Observed port: 22. First seen: 2026-09-23 13:05:07 UTC. Reporter: anonymous. Tags: Havoc.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
5.78.212.208
IOC database
- Type
- ipv4
- Value
5.78.212.208- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- ip:port combination that is used for botnet Command&control (C&C) attributed to Havoc
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Havoc (aliases: Havokiz). Confidence: 100. Observed port: 22. First seen: 2026-09-23 13:05:07 UTC. Reporter: anonymous. Tags: Havoc.
Remediations (7)
-
web:dec.ny.gov
The following information is available: Environmental Remediation Database Search - This is the main page from which the search applications launch. These databases are updated nightly. Spill Incidents Database This database contains records of chemical and petroleum spill incidents dating back to 1978.
-
web:owasp.org
The Access-Control-Request-Method header is used when a browser performs a preflight OPTIONS request and lets the client indicate the request method of the final request. On the other hand, the Access-Control-Allow-Method is a response header used by the server to describe the methods the clients are allowed to use.
-
web:www.cisa.gov
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22 -01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of ...
-
web:www.community.ui.com
We would like to show you a description here but the site won't allow us.
-
web:www.moddb.com
Games and mods development for Windows, Linux and Mac - ModDB
-
web:www.quora.com
We would like to show you a description here but the site won't allow us.
-
web:www.reddit.com
We would like to show you a description here but the site won't allow us.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.