164[.]92[.]88[.]210

Posts referencing this indicator

• Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet

  CrowdStrike-operated sinkhole IP address. Beacons to this IP indicate a dormant Glassworm infection.

  2026-05-26