192.168.1.21:4444

ip not resolving

Tracked by C2 Tracker · Whois queried 2026-10-04T17:31:07

Network

Network: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
CIDR: 192.168.0.0/16
Country: —

Contact

Handle: NET-192-168-0-0-1
Abuse: —

Observed in malware

Family	Sample SHA-256	First seen
AhMyth	ab99a33e7528…	2019-10-06

About AhMyth

Open-source Android RAT whose builder lowered the bar for mobile surveillance; has repeatedly sneaked into the Google Play store disguised inside seemingly legitimate apps.

ESET: First spyware for Android found on Google Play (AhMyth)

Signing certificate

Subject CN: Android
Issuer CN: Android
Valid: 2008-02-29 → 2035-07-17
Fingerprint: a40da80a59d170caa950cf15c18c454d47a39b26989d8b640ecd745ba71bf5dc

Other samples signed with this certificate? That's a lead worth checking — but not proof of a shared operator, since signing keys (and the Android debug certificate in particular) are widely reused. See the certificate page for every sample signed with it.