RST Threat feed. IOC: 104.131.28.202

2021-04-27T00:00:00
ID RST:85B9AC4E-0692-3353-9E8D-9C9BDCFE7439
Type rst
Reporter RST Threat Feed
Modified 2021-04-25T00:00:00

Description

Found 104[.]131.28.202 in RST Threat Feed with score 10. First seen: 2021-04-25T03:00:00, Last seen: 2021-04-25T03:00:00. IOC tags: malware. We found that the IOC is used by: cobalt_strike. ASN 14061: (First IP 104.131.0.0, Last IP 104.131.255.255). ASN Name "DIGITALOCEANASN" and Organisation "DigitalOcean LLC". This IP is a part of "digitalocean" address pools. ASN hosts 3444507 domains. GEO IP information: City "Clifton", Country "United States". IOC could be a False Positive (Cloud provider IP). https://rstcloud.net/