Public Mosaic C2 indicators

network

AS152194

120 hosts on this network in this archive, 119 still listed. First seen 2026-08-23.

feed checked 2026-10-30 17:37 UTC TLP:CLEAR

hosts 120 119 still listed

listings 188

families 16

first seen 2026-08-23

About

AS152194 is registered to CTG Server Ltd.. Spamhaus ASN-DROP has listed this network since at least 2026-05-24. Listings come from those parties' published lists and are shown only while the scanner still reports them. A network appears here because addresses it routes were listed, almost always for tenant activity on rented or compromised machines, not for anything the operator did. Large hosting providers appear because they are large.

Ports

:44346:8014:888813:5600210:43219:560019:560039:313376

The 8 ports with the most hosts, of 44.

Detection packs

Rules for this hub's 119 still-listed hosts, across all 2 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Suricata rules Sigma rules View in the live feed

Hosts · page 1 of 2

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

202.146.222.253DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.229.191DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.229.133Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30 14.128.50.253DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-27 14.128.50.213DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-27 14.128.50.149DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-27 134.122.204.168Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-30 202.146.222.229PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 202.146.222.48PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.229.14PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 27.124.17.194PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 27.124.17.190PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 27.124.17.187PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 202.146.222.115PureRATAS152194 · CTG Serverlast confirmed 2026-10-28 192.253.229.236PureRATAS152194 · CTG Serverlast confirmed 2026-10-28 134.122.154.247VShellAS152194 · CTG Serverlast confirmed 2026-10-16 143.92.56.96Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-18 223.26.52.38Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 202.79.169.203Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 27.124.34.100Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 27.50.63.50VShellAS152194 · CTG Serverlast confirmed 2026-10-30 202.79.171.9Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 143.92.56.244Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 27.124.34.55Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 223.26.52.42Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 143.92.56.103Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-18 202.79.171.3Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-14 202.95.1.40VShellAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.226.78PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 118.107.35.196DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-09 134.122.187.68PureRATAS152194 · CTG Serverlast confirmed 2026-10-03 118.107.35.248DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-09 118.107.13.102Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-28 112.213.110.214DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-29 134.122.140.110VShellAS152194 · CTG Serverlast confirmed 2026-10-08 202.61.130.209AdaptixAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.229.23PureRATAS152194 · CTG Serverlast confirmed 2026-10-13 27.124.36.153PureRATAS152194 · CTG Serverlast confirmed 2026-10-04 202.146.222.156PureRATAS152194 · CTG Serverlast confirmed 2026-10-13 137.220.194.12PureRATAS152194 · CTG Serverlast confirmed 2026-10-30 202.162.109.6OverlordAS152194 · CTG Serverlast confirmed 2026-10-30 202.162.109.5OverlordAS152194 · CTG Serverlast confirmed 2026-10-30 143.92.57.247OverlordAS152194 · CTG Serverlast confirmed 2026-10-30 143.92.62.62VShellAS152194 · CTG Serverlast confirmed 2026-09-10 112.213.103.111DarkSwordAS152194 · CTG Serverlast confirmed 2026-10-01 202.162.99.229DarkSwordAS152194 · CTG Serverlast confirmed 2026-09-16 134.122.154.92VShellAS152194 · CTG Serverlast confirmed 2026-10-30 202.61.138.81VShellAS152194 · CTG Serverlast confirmed 2026-10-30 192.253.226.10AdaptixAS152194 · CTG Serverlast confirmed 2026-09-19 134.122.155.245VShellAS152194 · CTG Serverlast confirmed 2026-09-06 134.122.155.243VShellAS152194 · CTG Serverlast confirmed 2026-09-24 134.122.155.233VShellAS152194 · CTG Serverlast confirmed 2026-09-06 118.107.9.233SliverAS152194 · CTG Serverlast confirmed 2026-09-06 118.107.9.213SliverAS152194 · CTG Serverlast confirmed 2026-09-06 45.64.52.67SliverAS152194 · CTG Serverlast confirmed 2026-09-08 202.61.140.122VShellAS152194 · CTG Serverlast confirmed 2026-09-23 118.107.9.217SliverAS152194 · CTG Serverlast confirmed 2026-09-06 210.56.48.176AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-13 45.64.52.82AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-30 202.95.22.69AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-30 202.95.22.67AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-30 192.252.176.72AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-03 45.64.52.70AsyncRATAS152194 · CTG Serverlast confirmed 2026-10-30 43.243.73.187Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-29 134.122.203.247Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-16 103.12.148.37Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-29 137.220.194.15Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-25 143.92.51.145Cobalt Strike +1AS152194 · CTG Serverlast confirmed 2026-10-30 137.220.251.124VShellAS152194 · CTG Serverlast confirmed 2026-10-30 137.220.199.216VShellAS152194 · CTG Serverlast confirmed 2026-10-30 134.122.153.121reverse_ssh +2AS152194 · CTG Serverlast confirmed 2026-10-22 121.127.232.151VShellAS152194 · CTG Serverlast confirmed 2026-10-30 202.61.140.244VShellAS152194 · CTG Serverlast confirmed 2026-10-30 118.107.23.32QuasarAS152194 · CTG Serverlast confirmed 2026-09-04 118.107.44.162SupershellAS152194 · CTG Serverlast confirmed 2026-10-30 118.107.44.149SupershellAS152194 · CTG Serverlast confirmed 2026-10-30 118.107.44.140SupershellAS152194 · CTG Serverlast confirmed 2026-10-30 202.61.137.217SliverAS152194 · CTG Serverlast confirmed 2026-10-30 137.220.219.243SliverAS152194 · CTG Serverlast confirmed 2026-10-30 118.107.9.178SliverAS152194 · CTG Serverlast confirmed 2026-09-06 27.124.43.145Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-04 202.162.99.199Quasar-familyAS152194 · CTG Serverlast confirmed 2026-09-04 118.107.16.32PureRAT +1AS152194 · CTG Serverlast confirmed 2026-09-22 118.107.1.203Quasar-familyAS152194 · CTG Serverlast confirmed 2026-09-04 103.45.66.107PureRAT +1AS152194 · CTG Serverlast confirmed 2026-09-22 134.122.168.166DcRatAS152194 · CTG Serverlast confirmed 2026-10-30 27.124.36.151PureRATAS152194 · CTG Serverlast confirmed 2026-10-04 27.124.36.136PureRATAS152194 · CTG Serverlast confirmed 2026-10-04 202.95.22.205BTMOBAS152194 · CTG Serverlast confirmed 2026-09-21 143.92.60.24reverse_ssh +1AS152194 · CTG Serverlast confirmed 2026-09-06 192.252.178.206Flying EagleAS152194 · CTG Serverlast confirmed 2026-10-11 143.92.36.171Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-12 143.92.36.176Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-12 118.107.23.26Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-19archived 143.92.32.198Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-02 118.107.47.28Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-13 118.107.47.27Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-13 27.124.43.141Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-04 27.124.43.241Flying EagleAS152194 · CTG Serverlast confirmed 2026-09-04 27.124.17.173DcRatAS152194 · CTG Serverlast confirmed 2026-10-05

Listed in error?

These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.