Indicator
Type ip · source ThreatFox
Verdict
KNOWN MALWARE — Cobalt Strike
What this is
IP indicator: 52.86.125.111
Exposure
Open ports, software & known CVEs · via Shodan InternetDB
Open ports (2)
ec2-52-86-125-111.compute-1.amazonaws.com · cloud
Threat detail
Exploitation status and malware-family attribution from stored fields.
Graph preview
Neighborhood topology — open the graph for interactive pivots.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.