ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 27.124.44.189:6668.

Database Entry

IOC ID:	1685812
IOC:	27.124.44.189:6668
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	Ghost RAT
Malware alias:	Farfli, Gh0st RAT, PCRat
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS64050 BGNL-HK
Country:	SG
First seen:	2025-12-24 10:32:30 UTC
Last seen:	2025-12-28 15:56:48 UTC
UUID:	d9e222ac-e0b3-11f0-9957-42010aa4000a
Reporter	DonPasci
Reward	5 credits from ThreatFox
Tags:	AS152194 c2 CTGSERVERLIMITED-AS-AP Farfli Gh0stRAT
Reference:	https://x.com/K_N1kolenko/status/2003717423636287958

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).