ThreatFox IOC Database
You are viewing the ThreatFox database entry for ip:port 139.180.195.18:2086.
Database Entry
IOC ID: | 841427 |
---|---|
IOC: | 139.180.195.18:2086 |
IOC Type : | ip:port |
Threat Type : | botnet_cc |
Malware: | Cobalt Strike |
Malware alias: | Agentemis, BEACON, CobaltStrike, cobeacon |
Confidence Level : | Confidence level is high (100%) |
First seen: | 2022-08-05 03:19:26 UTC |
Last seen: | never |
UUID: | 691edbb5-146d-11ed-8288-42010aa4000a |
Reporter | @drb_ra |
Reward | 5 credits from ThreatFox |
Tags: | AS-CHOOPA CobaltStrike |

@drb_ra
Cobalt Strike Server FoundC2: HTTP @ 139[.]180[.]195[.]18:2086
C2 Server: alibaba[.]qishi[.]lol,/en_US/all[.]js
POST URI: /submit[.]php
Country: Japan
ASN: AS-CHOOPA