TF-2013456
high
📛 Threat Title
VShell: ip:port combination that is used for botnet Command&control (C&C) 45.128.12.14:2053
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: VShell. Confidence: 100. Observed port: 2053. First seen: 2026-11-03 19:05:05 UTC. Reporter: anonymous. Tags: Vshell.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
ipv4
45.128.12.14
VT 5 / 92
IOC database
- Type
- ipv4
- Value
45.128.12.14- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- ip:port combination that is used for botnet Command&control (C&C) attributed to VShell
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Flagged by 5 of 92 VirusTotal vendors
| Vendor | Verdict | Detection |
|---|---|---|
| alphaMountain.ai | malicious | malicious |
| CRDF | malicious | malicious |
| Lionic | malicious | malicious |
| Gridinsoft | suspicious | suspicious |
| SOCRadar | suspicious | suspicious |
Details From VirusTotal
Basic Properties
| Network | 45.128.12.0/24 |
| Country | SG |
| AS owner | Host Universal Pty Ltd |
| ASN | 136557 |
| Regional registry | APNIC |
History
| Last analysis | 2026-10-19 16:32 UTC |
| Last modified on VirusTotal | 2026-10-19 22:59 UTC |
| WHOIS record date | 2026-09-22 19:29 UTC |
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a botnet command&control server (C&C). IOC type: ip:port combination that is used for botnet Command&control (C&C). Attributed malware: VShell. Confidence: 100. Observed port: 2053. First seen: 2026-11-03 19:05:05 UTC. Reporter: anonymous. Tags: Vshell.
Remediations (7)
-
web:archive.ipcc.ch
Explore the Fourth Assessment Report on climate change mitigation by IPCC's Working Group III, offering insights into strategies for addressing global warming.
-
web:archive.ipcc.ch
301 Moved Permanently Moved Permanently The document has moved here.
-
web:ascii.jp
We would like to show you a description here but the site won't allow us.
-
web:github.com
File upload / download, command execution, database operation, modification of file timestamp, etc
-
web:muscleandbrawn.com
Muscle and Brawn
-
web:staysafeonline.org
Your computer can get infected with malware and become part of a botnet , and you would probably not even know it until its too late. As part of the botnet , your device communicates and receives instructions from "command and control" computers, which can be located anywhere around the globe.
-
web:www.cisa.gov
This Insider Threat Mitigation Guide is designed to assist critical infrastructure owners and operators, related organizations, and communities in improving or establishing an insider threat mitigation program.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.