ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 107.189.21.145:3389.

Database Entry


IOC ID:1830498
IOC: 107.189.21.145:3389
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (91%)
Is compromised? : False
ASN:AS14956 ROUTERHOSTING
Country:- IR
First seen:2026-06-12 06:11:25 UTC
Last seen:never
UUID:f6031293-65fd-11f1-9e0e-42010aa4000a
Reporter Erebu
Reward 10 credits from anonymous
Tags:c2 erebus-v14 nation-state-hunter t1059_003 t1573_002

Avatar
Erebu
Confirmed C2 infrastructure via EREBUS APEX | PROOF:JARM:497592101f7cc00f|TLS_C2:cobalt_strike|ASN:AS14956|TIER:T2 | MITRE:T1059.003,T1573.002,T1071.001,T1055 | GEO:NL | SRC:shodan_AS20473 | TOOL:EREBUS-V14-WRAITH