🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 139.180.198.145:31337.

Database Entry


IOC ID:1976002
IOC: 139.180.198.145:31337
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Sliver
Confidence Level : Confidence level is high (80%)
Is compromised? : False
ASN:AS20473 AS-VULTR
Country:- US
First seen:2026-10-20 15:53:16 UTC
Last seen:never
UUID:558d018f-cc9e-11f1-bd13-42010aa4000a
Reporter z3r0s6
Reward 5 credits from ThreatFox
Tags:c2 implant-staging sliver
Reference: https://www.shodan.io/host/139.180.198.145

Avatar
z3r0s6
Sliver C2 with open directory staging 4 implants (2x Windows PE, 2x Linux ELF). Default mTLS cert (CN=multiplayer/issuer=operators) on port 31337. Vultr Japan. Reporter: z3r0s6