ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 206.119.5.235:443.

Database Entry


IOC ID:1815513
IOC: 206.119.5.235:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (80%)
Is compromised? : False
ASN:AS18186 NEBULA-GLOBAL
Country:- US
First seen:2026-05-17 06:52:23 UTC
Last seen:never
UUID:0ba1e71c-51b5-11f1-b930-42010aa4000a
Reporter Erebu
Reward 10 credits from anonymous
Tags:Cobalt-Strike erebus-wraith unattributed

Avatar
Erebu
Discovery_Method: grok_c2_sweep | TLS_SHA256: 01885174b6f7b391 | Certificate_CN: LiteSSL RSA CA 2025 | TLS_Cipher: TLS_AES_256_GCM_SHA384 | C2_Framework: COBALT-STRIKE | APT_Attribution: unattributed | Validation: Multi-layer_rDNS+CA+DQS+Honeypot