ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 43.153.222.28:443.

Database Entry

IOC ID:	1151693
IOC:	43.153.222.28:443
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	Cobalt Strike
Malware alias:	Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS132203 TENCENT-NET-AP-CN
Country:	CN
First seen:	2023-08-23 11:56:21 UTC
Last seen:	2026-06-10 16:21:25 UTC
UUID:	13e69268-41ac-11ee-9416-42010aa4000a
Reporter	drb_ra
Reward	10 credits from anonymous 10 credits from fnsank
Tags:	CobaltStrike cs-watermark-100000 Tencent Building Kejizhongyi Avenue

drb_ra

Cobalt Strike Server Found
C2: HTTPS @ 43[.]153[.]222[.]28:443
C2 Server: 43[.]153[.]222[.]28,/fwlink
POST URI: /submit[.]php
Country: Singapore
ASN: Tencent Building, Kejizhongyi Avenue

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).