TF-2018656
medium
📛 Threat Title
Cobalt Strike: ip:port combination that is used for botnet Command&control (C&C) 118.24.79.106:54321
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Cobalt Strike (aliases: Agentemis,BEACON,CobaltStrike,cobeacon). Confidence: 50. Observed port: 54321. First seen: 2026-11-07 05:10:14 UTC. Reporter: juroots. Tags: CobaltStrike, modat.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
118.24.79.106
VT: VT base fetch failed: HTTPError: 401 Client Error: Unauthorized for url: https://www.virustotal.com/api/v3/ip_addresses/118.24.79.106
IOC database
- Type
- ipv4
- Value
118.24.79.106- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- ip:port combination that is used for botnet Command&control (C&C) attributed to Cobalt Strike
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 401 Client Error: Unauthorized for url: https://www.virustotal.com/api/v3/ip_addresses/118.24.79.106
References (3)
- External reference Threatfox IOCs/Threats
- Malpedia profile Threatfox IOCs/Threats
-
ThreatFox IOC page
Threatfox IOCs/Threats
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: Cobalt Strike (aliases: Agentemis,BEACON,CobaltStrike,cobeacon). Confidence: 50. Observed port: 54321. First seen: 2026-11-07 05:10:14 UTC. Reporter: juroots. Tags: CobaltStrike, modat.
Remediations (9)
-
web:download.cobaltstrike.com
We would like to show you a description here but the site won't allow us.
-
web:hackblue.org
HackBlue ... Redirecting...
-
web:owasp.org
OWASP Foundation ... Redirecting...
-
web:pubs.acs.org
ACS Publications
-
web:thetechrim.com
We would like to show you a description here but the site won't allow us.
-
web:www.elastic.co
We would like to show you a description here but the site won't allow us.
-
web:www.mixedmartialarts.com
Probably the best combination ever landed in MMA, though, is Donald Cerrone's amazing knockout over Rick Story. The way he mixed in both the punches and the kicks to both the head and body of his opponent was a thing of beauty and every strike landed perfectly.
-
web:www.researchgate.net
The investigation by [22], used two approaches for botnet detec- tion; the first approach used a sliding window approach to detect anomalies in network traffic, while the second approach was based ...
-
web:www.rhisac.org
301 Moved Permanently 301 Moved Permanently nginx
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.