221.236.125.52
Classification: Malicious
221.236.125.52 is a malicious IP address in Chengdu, CN. Linked to Viperrat malware. Reported by ThreatFox Abuse.ch (Viper RAT), last seen 2026-09-30.
MITRE ATT&CK associations
Malware families: VIPERRAT (S0506)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Viper RAT | ThreatFox Abuse.ch | 2026-09-30 02:58:03 | 2026-09-30 03:25:09 | malicious-activity | S0506 ViperRAT |
Tags
port:60000Whois information
- AS name
- AS4134 CHINANET Sichuan province network
- Registrant
- CHINANET Sichuan province network
- City
- Chengdu
- Postal code
- 610000
- Country
- CN — China 🇨🇳
- First indexed
- 2026-09-30 03:25:09
- Last updated
- 2026-09-30 03:25:09