ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 116.204.171.70:69.

Database Entry


IOC ID:1690838
IOC: 116.204.171.70:69
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Ghost RAT
Malware alias:Farfli, Gh0st RAT, PCRat
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS138195 MOACKCOLTD-AS-AP
Country:- KR
First seen:2026-01-03 15:39:55 UTC
Last seen:2026-01-24 19:20:14 UTC
UUID:73d1d9b7-e8ba-11f0-9957-42010aa4000a
Reporter DonPasci
Reward 5 credits from ThreatFox
Tags:AS138195 c2 Farfli Gh0stRAT MOACKCOLTD-AS-AP RAT
Reference: https://x.com/K_N1kolenko/status/2007049894306230304

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-01-12 05:20:16 1cc412d5bbe1723ca2332e90eb6f557c4b5a68716cfc10114147dc4a7c847e0b