ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 121.127.253.206:8868.

Database Entry


IOC ID:1883184
IOC: 121.127.253.206:8868
IOC Type :ip:port
Threat Type :botnet_cc
Malware: ValleyRAT
Malware alias:Winos
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS152194 CTGSERVERLIMITED-AS-AP
Country:- HK
First seen:2026-08-20 15:45:13 UTC
Last seen:never
UUID:22232642-9cae-11f1-a7c1-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:RAT ValleyRAT

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2026-08-21 13:20:09 82219b5a553e738d112f284da60fe7ba91b34d368dc3d155e6d6af6386711304
2026-08-21 04:10:08 044685cec0e984f25a603d17870ee1c297842146bca86c2827fea078a3730fbc
2026-08-20 15:45:19 c5e82fca91a7b8140781eecbe9f709e96eed638deea3acd5f0ca35ef79a221c0