ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 85.121.148.88:42871.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1770634
IOC: 85.121.148.88:42871
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS48753 GOOGLE-CLOUD-PLATFORM
Country:- US
First seen:2026-03-18 09:06:42 UTC
Last seen:never
UUID:c80d4997-22a9-11f1-9af6-42010aa4000a
Reporter abuse_ch
Reward 10 credits from anonymous
Tags:CobaltStrike
Reference: https://bazaar.abuse.ch/sample/7b9778ed8559d714a26fc42c12a297658c8441ee790377944caa7d2d2eee06a1/