ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 134.175.8.102:10050.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1845967
IOC: 134.175.8.102:10050
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS45090 TENCENT-NET-AP
Country:- CN
First seen:2026-07-07 08:21:14 UTC
Last seen:never
UUID:50af345f-79da-11f1-97fa-42010aa4000a
Reporter navneeet
Reward 10 credits from anonymous
Tags:c2 CobaltStrike

Avatar
navneeet
Live Cobalt Strike team server. Self-signed default-DN cert (0=cobaltstrike, CN=Major Cobalt Strike),
serial 27530DFE, SHA1 FE1416BA041BAFB4D9BA736089253AF2C7149C5F, grabbed read-only (SECLEVEL=0). VT 1/0; not in ThreatFox.
Shares cert with
118.99.3.219:50050
(same
operator). Host: Shenzhen Tencent AS45090 CN.

Hunted via automated infrastructure fingerprinting using Claude Code-assisted workflows.