ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 185.89.249.66:443.

Database Entry


IOC ID:1834250
IOC: 185.89.249.66:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (93%)
Is compromised? : False
ASN:AS203144 HS-HOST9X
Country:- IN
First seen:2026-06-20 09:11:24 UTC
Last seen:never
UUID:ecd41078-6c75-11f1-9258-42010aa4000a
Reporter Erebu
Reward 10 credits from anonymous
Tags:c2 erebus-v14 nation-state-hunter t1055 t1071_001

Avatar
Erebu
Confirmed C2 infrastructure via EREBUS APEX | PROOF:JARM:f9d831c53182f569(cobalt_strike_malleable)|TLS_C2:cobalt_strike|ASN:AS203144|TIER:T2 | MITRE:T1071.001,T1055,T1059.003,T1573.002 | GEO:IT | SRC:shodan_AS202975 | TOOL:EREBUS-V14-WRAITH