ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 111.230.196.200:443.

Database Entry


IOC ID:236436
IOC: 111.230.196.200:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Cobalt Strike
Malware alias:Agentemis, BEACON, CobaltStrike, cobeacon
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS45090 TENCENT-NET-AP
Country:- CN
First seen:2021-10-22 12:07:15 UTC
Last seen:2026-06-10 17:22:31 UTC
UUID:98fa981c-3330-11ec-a35f-42010aa4000a
Reporter drb_ra
Reward 10 credits from
Tags:CobaltStrike

Avatar
drb_ra
Cobalt Strike Server Found
C2: HTTPS @ 111[.]230[.]196[.]200:443
C2 Server: service-mp2sc0gc-1301679103[.]gz[.]apigw[.]tencentcs[.]com,/api/getit
POST URI: /api/postit
Country: China
ASN: CNNIC-TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited