Skip to content

206.238.196.96

IP Address

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 1, 2026
Last Seen
September 1, 2026
API

IOC Validation

ThreatCluster AI
Confirmed IOC — High confidence

Explicitly identified as a hardcoded C2 IP for the PackClient RAT.

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC
Sandbox · 2
urlscan.ioAny.Run
Infrastructure · 3
ShodanCensysIPinfo
Malware trackers · 1
ThreatFox
Web search · 2
GoogleDuckDuckGo

Related Entities

PhishingChinaIndiaPackClientT1041 - Exfiltration Over C2 ChannelT1071 - Application Layer ProtocolT1218.011 - Rundll32T1547 - Boot Or Logon Autostart ExecutionT1566 - PhishingT1574 - Hijack Execution FlowWindowsManageEngine RMM