ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.89.214.29:443.

Database Entry


IOC ID:1829962
IOC: 185.89.214.29:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Havoc
Malware alias:Havokiz
Confidence Level : Confidence level is high (99%)
Is compromised? : False
ASN:AS41121 MUPHR
Country:- HR
First seen:2026-06-11 05:26:00 UTC
Last seen:never
UUID:67aa0554-6537-11f1-9e0e-42010aa4000a
Reporter Erebu
Reward 5 credits from ThreatFox
Tags:c2 erebus-v13 nation-state-hunter t1055 t1573_002

Avatar
Erebu
Confirmed C2 infrastructure via EREBUS APEX | PROOF:JARM:7125bb413f211ffb|TLS_C2:havoc|ASN:AS41121|TIER:T2 | MITRE:T1055,T1573.002,T1071.001,T1059.001 | GEO:HR | SRC:shodan_AS202975 | TOOL:EREBUS-V13-WRAITH