Public Mosaic C2 indicators

network

AS16509

101 hosts on this network in this archive, 94 still listed. First seen 2026-08-23.

feed checked 2026-10-30 17:37 UTC TLP:CLEAR

hosts 101 94 still listed

listings 127

families 18

first seen 2026-08-23

About

AS16509 is registered to Amazon.com, Inc.. A network appears here because addresses it routes were listed, almost always for tenant activity on rented or compromised machines, not for anything the operator did. Large hosting providers appear because they are large.

Ports

:44342:8015:744314:313377:88886:216723:32322:47822

The 8 ports with the most hosts, of 41.

Detection packs

Rules for this hub's 94 still-listed hosts, across all 2 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Suricata rules Sigma rules View in the live feed

Hosts · page 1 of 2

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

13.215.47.248MythicAS16509 · Amazon.comlast confirmed 2026-10-30 43.203.112.69Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-30 52.194.243.16SliverAS16509 · Amazon.comlast confirmed 2026-10-30 35.75.15.49DarkSwordAS16509 · Amazon.comlast confirmed 2026-10-30 18.143.76.7Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-27 47.128.235.169SliverAS16509 · Amazon.comlast confirmed 2026-10-28 3.109.17.133MythicAS16509 · Amazon.comlast confirmed 2026-10-30 47.129.52.27VShellAS16509 · Amazon.comlast confirmed 2026-10-30 35.72.209.50SliverAS16509 · Amazon.comlast confirmed 2026-10-30 15.207.73.20MythicAS16509 · Amazon.comlast confirmed 2026-10-26 63.186.47.151MythicAS16509 · Amazon.comlast confirmed 2026-10-19archived 3.98.91.44Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-23 3.24.186.0DcRatAS16509 · Amazon.comlast confirmed 2026-10-13 18.220.4.102Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-30 44.243.239.80HavocAS16509 · Amazon.comlast confirmed 2026-10-09 18.220.97.18MythicAS16509 · Amazon.comlast confirmed 2026-10-26archived 13.61.179.31HavocAS16509 · Amazon.comlast confirmed 2026-10-05 52.197.194.156PureRATAS16509 · Amazon.comlast confirmed 2026-10-30 54.251.235.248AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 47.130.215.99AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 13.214.130.115AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 44.240.136.251SliverAS16509 · Amazon.comlast confirmed 2026-10-06 47.131.50.242SliverAS16509 · Amazon.comlast confirmed 2026-10-30 18.218.117.239PureRATAS16509 · Amazon.comlast confirmed 2026-10-06 16.208.130.160PureRATAS16509 · Amazon.comlast confirmed 2026-09-29 13.232.187.232MythicAS16509 · Amazon.comlast confirmed 2026-09-23 54.250.169.207SupershellAS16509 · Amazon.comlast confirmed 2026-09-22 52.47.77.229AsyncRATAS16509 · Amazon.comlast confirmed 2026-09-29 13.36.191.191MythicAS16509 · Amazon.comlast confirmed 2026-09-21 54.255.21.149VShellAS16509 · Amazon.comlast confirmed 2026-10-02 13.127.122.166MythicAS16509 · Amazon.comlast confirmed 2026-09-25 3.110.54.253MythicAS16509 · Amazon.comlast confirmed 2026-09-19 34.215.173.126MythicAS16509 · Amazon.comlast confirmed 2026-10-09 3.70.251.33MythicAS16509 · Amazon.comlast confirmed 2026-10-18archived 54.247.42.8HavocAS16509 · Amazon.comlast confirmed 2026-10-02archived 3.6.16.126MythicAS16509 · Amazon.comlast confirmed 2026-09-29archived 43.198.116.85AdaptixAS16509 · Amazon.comlast confirmed 2026-09-28 34.242.163.197SliverAS16509 · Amazon.comlast confirmed 2026-10-30 54.95.7.136reverse_ssh +1AS16509 · Amazon.comlast confirmed 2026-09-27 15.168.12.234MythicAS16509 · Amazon.comlast confirmed 2026-09-06 18.171.190.112HavocAS16509 · Amazon.comlast confirmed 2026-09-10 3.76.202.212AsyncRATAS16509 · Amazon.comlast confirmed 2026-09-05 108.136.51.214QuasarAS16509 · Amazon.comlast confirmed 2026-09-16 54.46.17.182SliverAS16509 · Amazon.comlast confirmed 2026-09-08 18.179.34.241SupershellAS16509 · Amazon.comlast confirmed 2026-10-19 175.41.169.29VShellAS16509 · Amazon.comlast confirmed 2026-09-30 18.139.85.136VShellAS16509 · Amazon.comlast confirmed 2026-10-30 18.139.222.223VShellAS16509 · Amazon.comlast confirmed 2026-10-30 18.162.147.217VShellAS16509 · Amazon.comlast confirmed 2026-10-08 52.51.21.68SliverAS16509 · Amazon.comlast confirmed 2026-10-30 3.39.249.68Chisel +2AS16509 · Amazon.comlast confirmed 2026-09-05 54.187.35.128MythicAS16509 · Amazon.comlast confirmed 2026-10-30 3.143.55.137MythicAS16509 · Amazon.comlast confirmed 2026-10-08 44.249.249.89Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-09-14 13.236.190.6VShellAS16509 · Amazon.comlast confirmed 2026-10-09 13.231.27.88VShellAS16509 · Amazon.comlast confirmed 2026-10-30 13.212.206.34VShellAS16509 · Amazon.comlast confirmed 2026-10-30 13.212.111.223VShellAS16509 · Amazon.comlast confirmed 2026-09-27 13.210.13.81VShellAS16509 · Amazon.comlast confirmed 2026-10-09 13.204.0.27VShellAS16509 · Amazon.comlast confirmed 2026-10-08 78.13.60.90VShellAS16509 · Amazon.comlast confirmed 2026-10-08 65.0.216.226VShellAS16509 · Amazon.comlast confirmed 2026-09-07 54.180.100.54VShellAS16509 · Amazon.comlast confirmed 2026-10-08 47.129.155.127VShellAS16509 · Amazon.comlast confirmed 2026-09-18 47.129.3.232VShellAS16509 · Amazon.comlast confirmed 2026-09-27 34.243.36.28VShellAS16509 · Amazon.comlast confirmed 2026-10-08 18.179.119.184VShellAS16509 · Amazon.comlast confirmed 2026-10-08 18.178.31.87VShellAS16509 · Amazon.comlast confirmed 2026-10-30 18.163.8.203VShellAS16509 · Amazon.comlast confirmed 2026-09-08 16.162.195.211VShellAS16509 · Amazon.comlast confirmed 2026-10-07 16.171.13.191CovenantAS16509 · Amazon.comlast confirmed 2026-10-01 18.141.182.223SliverAS16509 · Amazon.comlast confirmed 2026-09-17 13.158.165.149SliverAS16509 · Amazon.comlast confirmed 2026-10-30 3.21.191.242SliverAS16509 · Amazon.comlast confirmed 2026-10-30 3.127.181.115DcRatAS16509 · Amazon.comlast confirmed 2026-09-01 3.67.112.102DcRatAS16509 · Amazon.comlast confirmed 2026-09-01 13.205.246.212PureRATAS16509 · Amazon.comlast confirmed 2026-09-27 54.199.206.9AsyncRATAS16509 · Amazon.comlast confirmed 2026-09-25 52.196.79.161AsyncRATAS16509 · Amazon.comlast confirmed 2026-09-25 3.113.147.16AsyncRATAS16509 · Amazon.comlast confirmed 2026-09-25 78.13.51.110Flying EagleAS16509 · Amazon.comlast confirmed 2026-09-20 52.196.120.218Flying EagleAS16509 · Amazon.comlast confirmed 2026-10-30 43.198.96.27Flying EagleAS16509 · Amazon.comlast confirmed 2026-10-30 35.73.165.146Brute RatelAS16509 · Amazon.comlast confirmed 2026-08-31archived 35.86.129.120QuasarAS16509 · Amazon.comlast confirmed 2026-08-28 3.121.234.29MythicAS16509 · Amazon.comlast confirmed 2026-10-22 13.231.27.0Brute RatelAS16509 · Amazon.comlast confirmed 2026-08-31archived 13.59.90.25AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 35.179.229.71HavocAS16509 · Amazon.comlast confirmed 2026-09-16 54.95.208.190HavocAS16509 · Amazon.comlast confirmed 2026-10-30 52.29.243.233AsyncRATAS16509 · Amazon.comlast confirmed 2026-08-26 13.231.5.121SliverAS16509 · Amazon.comlast confirmed 2026-08-28 13.212.38.253AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 35.179.92.211AdaptixAS16509 · Amazon.comlast confirmed 2026-10-17 18.143.169.148AdaptixAS16509 · Amazon.comlast confirmed 2026-10-30 13.236.153.60AsyncRAT +1AS16509 · Amazon.comlast confirmed 2026-10-30 54.183.237.74VShellAS16509 · Amazon.comlast confirmed 2026-09-09 18.136.148.19SliverAS16509 · Amazon.comlast confirmed 2026-08-25 13.205.33.34MythicAS16509 · Amazon.comlast confirmed 2026-08-25 65.1.70.222PureRATAS16509 · Amazon.comlast confirmed 2026-10-12

Listed in error?

These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.