S0154 · threatengine.sh

Home/Tool / Malware/Cobalt Strike
Tool / Malware
Cobalt Strike

S0154 · Linux, macOS, Windows
Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as “adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors”. Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system. In addition to its own capabilities, Cobalt Strike leverages the capabilities of other well-known tools such as Metasploit and Mimikatz.
ATT&CK S0154 2 actors documented 1,647 indicators
Sigma rules17 YARA rules0 Live IOCs1,647
◆
Actors Using This

russiaAPT29
chinaAPT41
⚊
Live Indicators

1,647 total
Indicators are defanged for safe handling. Newest first.
Show indicators (500)urlhxxp://microwaved.info/assets/ms/update/officefonts.dll2026-05-16 20:32:11 UTC
urlhxxp://5.252.177.38/assets/ms/update/officefonts.dll2026-05-16 20:32:08 UTC
urlhxxps://aaronart.com/H64.exe2026-02-20 07:52:14 UTC
urlhxxps://creativevoltage.com/M64.exe2026-02-20 07:52:13 UTC
urlhxxp://124.44.3.74:88/beacon.exe2026-02-13 10:22:11 UTC
urlhxxp://154.0.129.114:10702/02.08.2022.exe2026-01-13 09:06:10 UTC
ip:port43[.]142[.]137[.]169:18443
ip:port8[.]222[.]147[.]42:443
ip:port8[.]222[.]147[.]42:80
ip:port8[.]222[.]147[.]42:8080
ip:port100[.]110[.]56[.]1:80
ip:port154[.]12[.]86[.]154:8000
ip:port47[.]121[.]117[.]88:80
ip:port43[.]144[.]11[.]180:80
ip:port47[.]116[.]115[.]84:8001
ip:port47[.]116[.]115[.]84:443
ip:port47[.]116[.]115[.]84:80
ip:port111[.]230[.]36[.]144:443
ip:port47[.]116[.]115[.]84:8080
ip:port111[.]230[.]36[.]144:8080
ip:port43[.]144[.]11[.]180:8080
ip:port154[.]12[.]86[.]154:8001
ip:port154[.]12[.]86[.]154:443
ip:port154[.]12[.]86[.]154:80
ip:port154[.]12[.]86[.]154:8080
ip:port43[.]144[.]11[.]180:443
ip:port120[.]48[.]18[.]226:8081
ip:port45[.]152[.]65[.]240:8080
ip:port111[.]170[.]148[.]169:8443
ip:port173[.]230[.]134[.]215:8090
ip:port175[.]24[.]201[.]23:8088
ip:port47[.]105[.]76[.]33:8080
ip:port108[.]61[.]223[.]230:80
ip:port111[.]230[.]36[.]144:80
ip:port130[.]94[.]14[.]186:443
ip:port130[.]94[.]14[.]186:80
ip:port130[.]94[.]14[.]186:8080
ip:port43[.]143[.]145[.]187:443
ip:port47[.]82[.]234[.]12:80
ip:port172[.]174[.]90[.]104:443
ip:port160[.]22[.]28[.]230:443
ip:port160[.]22[.]28[.]230:80
ip:port104[.]236[.]69[.]171:443
ip:port47[.]116[.]67[.]169:2087
ip:port119[.]91[.]26[.]245:6666
ip:port138[.]201[.]86[.]48:443
ip:port172[.]86[.]76[.]154:8080
ip:port172[.]86[.]76[.]154:80
ip:port43[.]142[.]51[.]69:80
ip:port43[.]144[.]19[.]220:80
ip:port43[.]142[.]51[.]69:8080
ip:port43[.]144[.]19[.]220:443
ip:port43[.]144[.]19[.]220:8080
ip:port27[.]124[.]19[.]53:8080
ip:port23[.]236[.]64[.]238:8778
ip:port1[.]117[.]61[.]9:12306
ip:port38[.]14[.]248[.]199:8080
ip:port27[.]124[.]19[.]53:80
ip:port178[.]154[.]206[.]48:443
ip:port185[.]190[.]229[.]16:443
ip:port66[.]154[.]119[.]177:443
ip:port118[.]31[.]114[.]149:443
ip:port207[.]56[.]229[.]234:8080
ip:port120[.]53[.]15[.]64:443
ip:port120[.]53[.]15[.]64:8080
ip:port101[.]126[.]150[.]253:8080
ip:port101[.]126[.]150[.]253:443
ip:port1[.]116[.]121[.]47:8082
ip:port120[.]53[.]15[.]64:80
ip:port175[.]178[.]36[.]137:8011
ip:port185[.]156[.]43[.]88:443
ip:port62[.]234[.]22[.]228:51234
ip:port47[.]236[.]91[.]172:8000
ip:port155[.]138[.]147[.]166:8080
ip:port185[.]193[.]153[.]57:443
ip:port138[.]201[.]90[.]50:443
ip:port155[.]138[.]147[.]166:443
ip:port155[.]138[.]147[.]166:80
ip:port185[.]193[.]17[.]158:443
ip:port185[.]89[.]79[.]154:443
ip:port107[.]173[.]186[.]7:443
ip:port107[.]173[.]186[.]7:8080
ip:port194[.]58[.]92[.]122:443
ip:port107[.]173[.]186[.]7:80
ip:port124[.]220[.]36[.]247:8080
ip:port124[.]220[.]36[.]247:80
ip:port124[.]220[.]36[.]247:443
ip:port178[.]154[.]254[.]203:443
ip:port185[.]89[.]78[.]223:443
ip:port124[.]220[.]6[.]158:8080
ip:port123[.]57[.]208[.]37:80
ip:port123[.]57[.]208[.]37:8080
ip:port113[.]31[.]115[.]231:8080
ip:port81[.]68[.]216[.]220:8080
ip:port113[.]31[.]115[.]231:80
ip:port81[.]68[.]216[.]220:443
ip:port168[.]222[.]97[.]93:8080
ip:port81[.]68[.]216[.]220:80
ip:port106[.]75[.]252[.]66:443
ip:port103[.]146[.]30[.]121:443
ip:port185[.]234[.]157[.]185:443
ip:port175[.]178[.]36[.]137:80
ip:port106[.]75[.]252[.]66:8080
ip:port172[.]252[.]232[.]23:443
ip:port81[.]172[.]90[.]197:443
ip:port172[.]216[.]54[.]73:443
ip:port172[.]216[.]116[.]64:443
ip:port192[.]200[.]220[.]100:443
ip:port106[.]75[.]252[.]66:80
ip:port47[.]98[.]107[.]233:80
ip:port203[.]195[.]157[.]138:8443
ip:port182[.]92[.]115[.]48:7777
ip:port130[.]94[.]14[.]186:5555
ip:port172[.]86[.]76[.]154:443
ip:port119[.]29[.]112[.]239:8005
ip:port207[.]56[.]229[.]234:443
ip:port206[.]119[.]173[.]149:443
ip:port101[.]126[.]150[.]253:80
ip:port27[.]124[.]19[.]53:443
ip:port47[.]236[.]91[.]172:80
ip:port38[.]14[.]248[.]199:80
ip:port38[.]14[.]248[.]199:443
ip:port47[.]122[.]118[.]104:443
ip:port207[.]56[.]229[.]234:80
ip:port155[.]138[.]147[.]166:5555
ip:port107[.]173[.]186[.]7:8001
ip:port123[.]57[.]208[.]37:443
ip:port118[.]31[.]62[.]238:8080
ip:port1[.]117[.]61[.]9:8443
domainct[.]feliz[.]icu
ip:port47[.]102[.]184[.]26:8443
ip:port47[.]121[.]117[.]88:443
ip:port147[.]78[.]2[.]110:80
ip:port47[.]121[.]117[.]88:8443
ip:port113[.]31[.]115[.]231:443
ip:port43[.]139[.]170[.]200:443
ip:port168[.]222[.]97[.]93:443
ip:port168[.]222[.]97[.]93:80
ip:port161[.]248[.]87[.]10:443
ip:port118[.]31[.]62[.]238:443
ip:port117[.]72[.]168[.]103:50011
ip:port101[.]132[.]156[.]12:443
ip:port101[.]35[.]102[.]87:18443
ip:port117[.]50[.]184[.]221:10080
ip:port112[.]124[.]71[.]123:55555
ip:port38[.]55[.]124[.]41:16571
ip:port172[.]245[.]28[.]187:4440
ip:port117[.]72[.]198[.]62:9987
ip:port150[.]158[.]109[.]61:9090
ip:port112[.]213[.]106[.]53:18443
ip:port142[.]171[.]172[.]100:17443
domainapi[.]apifox[.]top
domain39nasm720z98q[.]cfc-execute[.]bj[.]baidubce[.]com
ip:port139[.]226[.]191[.]247:2082
ip:port139[.]196[.]50[.]117:9930
ip:port106[.]53[.]82[.]117:18443
ip:port202[.]95[.]18[.]30:53
domainns1[.]cacheflow[.]top
ip:port47[.]94[.]168[.]149:9999
ip:port47[.]83[.]254[.]175:1102
domain1364170351-kld29tgkc1[.]ap-guangzhou[.]tencentscf[.]com
ip:port45[.]202[.]249[.]88:443
ip:port45[.]202[.]249[.]88:80
ip:port49[.]7[.]54[.]204:8901
ip:port106[.]14[.]116[.]17:18443
ip:port101[.]33[.]225[.]32:8011
ip:port45[.]207[.]192[.]190:30078
ip:port207[.]56[.]226[.]75:443
ip:port117[.]72[.]168[.]103:16337
domainstatic[.]slbc7890[.]shop
ip:port68[.]64[.]178[.]130:443
ip:port39[.]101[.]78[.]48:443
ip:port124[.]223[.]90[.]150:80
ip:port103[.]53[.]81[.]232:443
ip:port103[.]53[.]81[.]232:80
ip:port1[.]15[.]100[.]187:443
domainwww[.]pronhub[.]shop
domainupdate[.]javashell[.]com
domain1325813086-kvn4jlpgeu[.]ap-shanghai[.]tencentscf[.]com
domain1364170351-ivarm6apjz[.]ap-guangzhou[.]tencentscf[.]com
domain4176rbz8vepn6[.]cfc-execute[.]bj[.]baidubce[.]com
domainwww[.]cement-chemistry[.]com
ip:port8[.]211[.]130[.]16:443
ip:port172[.]245[.]156[.]179:18443
domainwebshareclouds[.]com
domainperfectgo[.]top
ip:port83[.]147[.]19[.]38:7899
ip:port8[.]130[.]80[.]145:18443
ip:port154[.]219[.]115[.]123:61443
ip:port119[.]29[.]198[.]193:8555
ip:port77[.]74[.]201[.]243:53
domaint[.]shakesnap[.]net
domaint2[.]shakesnap[.]net
ip:port8[.]130[.]173[.]155:30006
ip:port31[.]7[.]62[.]178:14443
ip:port80[.]78[.]22[.]41:783
ip:port49[.]232[.]90[.]5:18443
ip:port45[.]227[.]253[.]121:51227
ip:port38[.]165[.]21[.]163:18443
ip:port151[.]245[.]90[.]45:443
domainap[.]johamp[.]com
ip:port34[.]124[.]142[.]136:443
ip:port34[.]124[.]142[.]136:80
ip:port203[.]160[.]54[.]22:8443
ip:port195[.]123[.]220[.]237:2053
ip:port165[.]154[.]22[.]163:80
domainh67as5d5x[.]m6p3wca1[.]cc
ip:port47[.]101[.]172[.]178:443
ip:port38[.]207[.]176[.]96:8520
ip:port23[.]235[.]186[.]164:7887
ip:port23[.]248[.]204[.]162:7887
ip:port23[.]248[.]236[.]163:7887
domainsafeaxis[.]xyz
ip:port38[.]55[.]177[.]51:443
ip:port175[.]24[.]201[.]23:80
ip:port47[.]239[.]222[.]85:443
ip:port144[.]208[.]127[.]206:443
ip:port8[.]222[.]192[.]153:8000
ip:port54[.]205[.]26[.]32:443
ip:port64[.]83[.]42[.]94:443
ip:port47[.]236[.]91[.]172:443
ip:port165[.]22[.]16[.]194:80
ip:port118[.]25[.]178[.]35:80
domainsecure-server[.]sbs
domainupdate[.]cdn-update[.]workers[.]dev
ip:port165[.]154[.]24[.]229:80
ip:port203[.]160[.]54[.]22:8080
ip:port103[.]230[.]15[.]38:81
ip:port106[.]75[.]31[.]247:80
ip:port146[.]19[.]125[.]9:80
ip:port82[.]156[.]219[.]31:8443
ip:port39[.]105[.]74[.]52:443
ip:port39[.]105[.]74[.]52:80
ip:port193[.]53[.]127[.]220:443
ip:port149[.]88[.]73[.]40:4443
domainwww[.]microsslcheck[.]com
domainreleases-export-finishing-phillips[.]trycloudflare[.]com
ip:port101[.]43[.]29[.]69:80
ip:port82[.]156[.]62[.]131:80
ip:port46[.]137[.]196[.]122:8000
ip:port217[.]154[.]212[.]25:8081
ip:port156[.]245[.]147[.]98:9010
ip:port100[.]113[.]210[.]8:8081
domainmicrosoftcdn[.]accesscam[.]org
ip:port47[.]109[.]20[.]107:80
ip:port156[.]245[.]147[.]101:9010
domain1318289497-6hwi9hel8e[.]ap-beijing[.]tencentscf[.]com
ip:port175[.]24[.]201[.]23:8443
ip:port45[.]43[.]59[.]179:53
domainns1[.]twnic[.]top
domaincc[.]twnic[.]top
ip:port107[.]172[.]252[.]244:443
ip:port147[.]78[.]2[.]110:443
ip:port45[.]130[.]148[.]102:8080
ip:port8[.]149[.]139[.]253:8080
ip:port2[.]26[.]133[.]54:443
ip:port103[.]230[.]15[.]38:80
ip:port156[.]245[.]147[.]98:53
domaindd[.]googleos-js[.]vip
domaind2[.]googleos-js[.]vip
ip:port8[.]136[.]97[.]98:8081
ip:port124[.]222[.]75[.]188:443
ip:port211[.]154[.]20[.]173:4443
ip:port192[.]210[.]174[.]149:443
ip:port154[.]23[.]182[.]238:2086
ip:port141[.]227[.]135[.]62:80
domaincs[.]demo888999[.]com
domainc2[.]woshishabi[.]cc
ip:port47[.]94[.]162[.]43:2222
ip:port82[.]156[.]62[.]131:5555
ip:port43[.]225[.]158[.]58:53
domainws1[.]227api[.]com
domainws[.]227api[.]com
ip:port107[.]174[.]186[.]78:4445
ip:port104[.]143[.]39[.]243:443
ip:port139[.]224[.]67[.]220:80
ip:port103[.]97[.]176[.]69:80
ip:port39[.]100[.]66[.]238:80
ip:port39[.]100[.]66[.]238:443
ip:port82[.]156[.]90[.]136:9180
ip:port149[.]88[.]86[.]94:8880
ip:port118[.]25[.]183[.]203:80
domaincdn1[.]wakecoin[.]xyz
ip:port45[.]227[.]253[.]121:8080
ip:port49[.]233[.]70[.]247:443
ip:port101[.]201[.]247[.]234:80
ip:port20[.]166[.]18[.]164:443
ip:port152[.]136[.]159[.]25:9999
ip:port218[.]244[.]142[.]4:8888
ip:port67[.]225[.]255[.]139:8882
ip:port209[.]59[.]184[.]78:8882
ip:port121[.]4[.]92[.]72:1111
ip:port43[.]230[.]200[.]254:53
domainns2[.]jane2010[.]filegear-sg[.]me
domainns1[.]jane2010[.]filegear-sg[.]me
ip:port47[.]121[.]197[.]137:443
ip:port47[.]109[.]23[.]77:4567
ip:port43[.]167[.]177[.]224:7778
ip:port52[.]220[.]247[.]175:80
ip:port43[.]128[.]59[.]217:8080
domainbxx2rghe05kng[.]cfc-execute[.]bj[.]baidubce[.]com
ip:port139[.]224[.]23[.]63:8866
ip:port52[.]220[.]247[.]175:443
ip:port119[.]91[.]254[.]137:80
ip:port43[.]254[.]218[.]245:443
ip:port156[.]239[.]47[.]94:81
ip:port47[.]104[.]248[.]7:8884
ip:port120[.]48[.]18[.]226:81
ip:port101[.]35[.]214[.]58:80
ip:port47[.]109[.]202[.]237:80
ip:port39[.]102[.]125[.]11:4435
ip:port195[.]85[.]207[.]253:443
ip:port43[.]139[.]108[.]161:8192
ip:port47[.]76[.]96[.]68:5555
ip:port111[.]230[.]217[.]36:443
ip:port109[.]244[.]130[.]113:443
ip:port104[.]168[.]117[.]123:7777
ip:port43[.]143[.]242[.]10:5555
ip:port43[.]143[.]242[.]10:80
ip:port47[.]122[.]47[.]221:8880
ip:port77[.]91[.]97[.]4:53
ip:port74[.]211[.]98[.]224:7777
ip:port74[.]211[.]98[.]224:9999
ip:port49[.]234[.]199[.]152:80
ip:port120[.]48[.]25[.]153:80
ip:port83[.]229[.]127[.]46:9999
ip:port47[.]92[.]208[.]27:443
ip:port154[.]83[.]12[.]132:53
ip:port43[.]154[.]190[.]128:33060
ip:port103[.]117[.]120[.]98:5555
ip:port115[.]191[.]25[.]159:7777
ip:port156[.]239[.]252[.]191:448
ip:port47[.]76[.]96[.]68:80
ip:port101[.]35[.]95[.]103:4444
ip:port182[.]255[.]44[.]96:443
ip:port51[.]222[.]87[.]16:433
domaincdn[.]sys-update[.]online
ip:port165[.]154[.]244[.]77:2562
ip:port43[.]138[.]39[.]212:80
ip:port156[.]245[.]144[.]203:8880
ip:port156[.]245[.]144[.]203:443
ip:port156[.]245[.]144[.]203:4443
ip:port119[.]29[.]117[.]194:801
ip:port60[.]247[.]206[.]23:7443
ip:port115[.]29[.]231[.]140:8888
ip:port38[.]147[.]170[.]252:7777
domainaliyun[.]commandandcontrol[.]top
ip:port188[.]227[.]14[.]105:443
ip:port59[.]110[.]40[.]60:8443
ip:port23[.]226[.]136[.]169:50051
ip:port178[.]157[.]59[.]195:8443
ip:port103[.]39[.]79[.]102:7443
ip:port115[.]190[.]250[.]28:5521
ip:port47[.]92[.]169[.]87:80
ip:port64[.]89[.]161[.]183:443
ip:port47[.]104[.]159[.]246:18443
ip:port115[.]190[.]53[.]184:666
ip:port107[.]172[.]217[.]220:12096
ip:port81[.]68[.]89[.]216:8088
ip:port111[.]228[.]4[.]54:4455
ip:port119[.]91[.]54[.]176:50001
ip:port101[.]200[.]193[.]211:8086
ip:port83[.]229[.]127[.]46:8888
ip:port117[.]72[.]191[.]140:8028
ip:port118[.]107[.]0[.]254:2002
ip:port128[.]241[.]229[.]70:6001
ip:port120[.]77[.]211[.]144:12345
ip:port45[.]192[.]110[.]197:8088
ip:port1[.]15[.]171[.]190:443
ip:port8[.]141[.]93[.]66:12345
ip:port118[.]107[.]0[.]254:2003
ip:port47[.]109[.]45[.]70:12345
ip:port192[.]3[.]233[.]166:59850
ip:port1[.]15[.]25[.]148:443
ip:port106[.]52[.]208[.]143:443
ip:port106[.]13[.]137[.]229:443
ip:port101[.]43[.]2[.]116:443
ip:port101[.]133[.]148[.]66:443
ip:port115[.]190[.]178[.]249:443
ip:port114[.]132[.]150[.]96:443
ip:port110[.]40[.]176[.]194:443
ip:port120[.]48[.]50[.]33:443
ip:port117[.]72[.]214[.]50:443
ip:port124[.]223[.]199[.]39:443
ip:port124[.]221[.]32[.]87:443
ip:port124[.]220[.]48[.]168:443
ip:port124[.]220[.]164[.]98:443
ip:port121[.]41[.]167[.]80:443
ip:port152[.]136[.]139[.]105:443
ip:port129[.]204[.]103[.]151:443
ip:port124[.]223[.]47[.]219:443
ip:port172[.]245[.]215[.]43:443
ip:port165[.]154[.]125[.]212:443
ip:port156[.]233[.]233[.]134:443
ip:port154[.]201[.]91[.]224:443
ip:port38[.]190[.]224[.]63:443
ip:port222[.]255[.]214[.]236:443
ip:port192[.]252[.]187[.]60:443
ip:port178[.]16[.]52[.]194:443
ip:port43[.]139[.]146[.]100:443
ip:port43[.]133[.]41[.]106:443
ip:port42[.]192[.]49[.]72:443
ip:port39[.]107[.]85[.]83:443
ip:port39[.]106[.]144[.]162:443
ip:port47[.]100[.]168[.]4:443
ip:port43[.]139[.]169[.]60:443
ip:port47[.]111[.]146[.]110:443
ip:port47[.]243[.]175[.]24:443
ip:port47[.]239[.]188[.]48:443
ip:port47[.]122[.]30[.]177:443
ip:port47[.]122[.]1[.]243:443
ip:port61[.]166[.]154[.]109:443
ip:port49[.]235[.]177[.]231:443
ip:port81[.]70[.]255[.]195:443
ip:port81[.]69[.]98[.]230:443
ip:port8[.]210[.]78[.]137:443
ip:port83[.]229[.]126[.]65:443
ip:port81[.]71[.]159[.]99:443
ip:port83[.]229[.]123[.]61:443
ip:port83[.]229[.]126[.]183:443
ip:port8[.]153[.]205[.]30:443
ip:port8[.]137[.]149[.]67:443
ip:port47[.]93[.]28[.]103:443
ip:port60[.]205[.]139[.]210:443
domainlcowpowerlite[.]italynorth[.]cloudapp[.]azure[.]com
ip:port47[.]109[.]198[.]8:443
ip:port47[.]120[.]70[.]161:443
ip:port47[.]121[.]137[.]8:443
ip:port47[.]121[.]29[.]60:443
ip:port45[.]115[.]236[.]152:443
ip:port47[.]107[.]136[.]106:443
ip:port47[.]109[.]145[.]121:443
ip:port192[.]140[.]176[.]79:443
ip:port36[.]140[.]162[.]173:443
ip:port39[.]105[.]165[.]37:443
ip:port152[.]32[.]251[.]78:443
ip:port154[.]201[.]74[.]112:443
ip:port179[.]43[.]186[.]214:443
ip:port139[.]196[.]41[.]201:443
ip:port139[.]224[.]16[.]185:443
ip:port14[.]103[.]175[.]50:443
ip:port150[.]187[.]25[.]242:443
ip:port120[.]48[.]168[.]57:443
ip:port121[.]40[.]18[.]128:443
ip:port122[.]51[.]93[.]94:443
ip:port134[.]122[.]140[.]185:443
ip:port117[.]72[.]102[.]110:443
ip:port117[.]72[.]242[.]9:443
ip:port113[.]44[.]67[.]52:443
ip:port115[.]190[.]161[.]178:443
ip:port106[.]38[.]201[.]95:443
ip:port106[.]75[.]162[.]108:443
ip:port106[.]75[.]215[.]96:443
ip:port106[.]75[.]224[.]31:443
ip:port106[.]12[.]219[.]245:443
ip:port106[.]13[.]29[.]104:443
ip:port47[.]239[.]230[.]84:20000
ip:port149[.]129[.]37[.]105:30002
ip:port192[.]140[.]176[.]79:12124
ip:port107[.]150[.]105[.]91:443
ip:port111[.]92[.]243[.]40:443
ip:port106[.]12[.]219[.]245:8072
ip:port47[.]120[.]46[.]230:443
ip:port121[.]40[.]37[.]253:50059
ip:port167[.]179[.]76[.]179:53
domainns1[.]ns-apache[.]jo3[.]org
ip:port223[.]26[.]63[.]57:443
ip:port47[.]120[.]32[.]72:8075
ip:port121[.]4[.]92[.]72:5000
ip:port179[.]43[.]189[.]17:9443
ip:port113[.]250[.]188[.]15:8078
ip:port139[.]196[.]41[.]201:30001
ip:port117[.]72[.]178[.]246:4848
ip:port47[.]98[.]253[.]102:80
ip:port120[.]48[.]168[.]57:8080
ip:port83[.]229[.]123[.]61:7777
ip:port139[.]224[.]16[.]185:1234
domainwww[.]quick-shares[.]com
ip:port8[.]148[.]184[.]136:8880
ip:port117[.]72[.]178[.]246:443
ip:port38[.]49[.]57[.]15:443
ip:port47[.]243[.]238[.]194:54188
domainapi[.]shenzhenschool[.]fun
ip:port115[.]190[.]233[.]79:443
ip:port101[.]34[.]205[.]214:443
ip:port103[.]171[.]35[.]66:443
ip:port107[.]149[.]192[.]54:443
ip:port124[.]222[.]218[.]20:443
ip:port124[.]221[.]255[.]78:443
ip:port123[.]56[.]78[.]220:443
ip:port152[.]32[.]202[.]240:443
ip:port150[.]158[.]119[.]242:443
ip:port165[.]154[.]244[.]73:443
ip:port156[.]225[.]20[.]77:443
ip:port182[.]92[.]239[.]94:443
ip:port39[.]105[.]160[.]175:443
ip:port38[.]38[.]250[.]99:443
ip:port211[.]184[.]175[.]246:443
ip:port45[.]58[.]56[.]34:443
ip:port8[.]130[.]80[.]145:443
Aliases
Cobalt Strike
Intelligence Graph · click any node to traverse
CVETechnique ActorTool Family
drag to reposition · click any node to traverse · button top-right enlarges
External lookups - second-class, for what we don’t hold ourselves
MITRE ATT&CK Malpedia MalwareBazaar ThreatFox
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin