ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 167.99.166.159:8686.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1843426
IOC: 167.99.166.159:8686
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS14061 DIGITALOCEAN-ASN
Country:- US
First seen:2026-07-02 11:44:19 UTC
Last seen:never
UUID:f6709ab8-75ec-11f1-97fa-42010aa4000a
Reporter navneeet
Reward 5 credits from ThreatFox
Tags:Mythic MythicC2

Avatar
navneeet
Live Mythic C2 teamserver. Self-signed cert `O=Mythic C2` (SHA1 `8CF0ECF4665300965A2CF2152D1B13EEFA929247`, NotAfter 2027-06-08) on TCP/8686. Mythic nginx/react backend (404 application/javascript). Verified live via neutral nodes 2026-07-02. 0/VT; not in ThreatFox. Host: DigitalOcean (US).

Hunted via automated infrastructure fingerprinting using Claude Code-assisted workflows.