ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 47.238.104.19:6666.

Database Entry

IOC ID:	1736089
IOC:	47.238.104.19:6666
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	Ghost RAT
Malware alias:	Farfli, Gh0st RAT, PCRat
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS45102 ALIBABA-CN-NET
Country:	CN
First seen:	2026-01-23 10:33:37 UTC
Last seen:	2026-02-14 16:01:42 UTC
UUID:	fa068675-f846-11f0-9957-42010aa4000a
Reporter	DonPasci
Reward	5 credits from ThreatFox
Tags:	ALIBABA-CN-NET AS45102 c2 Farfli Gh0stRAT RAT
Reference:	https://x.com/K_N1kolenko/status/2014636649502613816

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).