ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 119.194.153.12:80.

Database Entry


IOC ID:1867847
IOC: 119.194.153.12:80
IOC Type :ip:port
Threat Type :payload_delivery
Malware: XMRIG
Confidence Level : Confidence level is high (80%)
Is compromised? : False
ASN:AS4766 KIXS-AS-KR
Country:- KR
First seen:2026-08-03 14:19:10 UTC
Last seen:never
UUID:6d7a8a28-8f41-11f1-8325-42010aa4000a
Reporter nullblue67
Reward 5 credits from ThreatFox
Tags:cryptojacking Dropper xmrig
Reference: https://twitter.com/NullBlue67

Avatar
nullblue67
XMRig/rediserver C2 (operator rotated from 175.119.7.220:81). http://119.194.153.12/icon/js/ serves config.json, p225.sh, x.rar->rediserver. Delivered via PostgreSQL COPY by 65.49.27.190. Port open. 2026-08-03 NullBlue67