84.201.4[.]120IP address

Reported by 1 independent source · first reported 4 Mar 2026 by Huntress · last reported 4 Mar 2026

Last reported 7 months ago

What the reports say

1 report, newest first · the exact sentence from each

“84.201.4[.]120”

HuntressVendor4 Mar 2026
How Fake OpenClaw Installers Spread GhostSocks Malware

Indicators reported together

named in the same reports

socifiapp[.]comin 1 report
star-history[.]comin 1 report
249058ce8dc6e74c…5dceea008139in 1 report
0b6ed577b993fd81…184685af7e05in 1 report
b73bd2e4cb16e903…896797435b82in 1 report
147.45.197[.]92in 1 report
94.228.161[.]88in 1 report
e13d9304f7ebdab1…ecfebf18b9fdin 1 report
518ff5fbfa4296ab…5175fb70e2b3in 1 report
f03e38e1c39ac521…f340523b4b51in 1 report
40fc240febf2441d…de38e266b378in 1 report
185.196.9[.]98in 1 report
serverconect[.]ccin 1 report
fd67063ffb0bcde4…1a0894f12690in 1 report
d5dffba463beae20…d819a1809846in 1 report
a22ddb3083b62dae…5c8908740ed5in 1 report
121.127.33[.]212in 1 report
144.31.123[.]157in 1 report
144.31.139[.]201in 1 report
144.31.139[.]203in 1 report

Copy these 20 indicators · defanged

20 indicators, defanged, one per line

socifiapp[.]com
star-history[.]com
249058ce8dc6e74cff9fb84d4d32c82e371265b40d02bb70b7955dceea008139
0b6ed577b993fd81e14f9abbef710e881629b8521580f3a127b2184685af7e05
b73bd2e4cb16e9036aa7125587c5b3289e17e62f8831de1f9709896797435b82
147.45.197[.]92
94.228.161[.]88
e13d9304f7ebdab13f6cb6fae3dff3a007c87fed59b0e06ebad3ecfebf18b9fd
518ff5fbfa4296abf38dfc342107f70e1491a7460978da6315a75175fb70e2b3
f03e38e1c39ac52179e43107cf7511b9407edf83c008562250f5f340523b4b51
40fc240febf2441d58a7e2554e4590e172bfefd289a5d9fa6781de38e266b378
185.196.9[.]98
serverconect[.]cc
fd67063ffb0bcde44dca5fea09cc0913150161d7cb13cffc2a001a0894f12690
d5dffba463beae207aee339f88a18cfcd2ea2cd3e36e98d27297d819a1809846
a22ddb3083b62dae7f2c8e1e86548fc71b63b7652b556e50704b5c8908740ed5
121.127.33[.]212
144.31.123[.]157
144.31.139[.]201
144.31.139[.]203

Thanks — we review every report.

Report a wrong value