Public Mosaic C2 indicators

tls certificate

Certificate 87f2085c32b6…

146 convicted hosts served this exact certificate; 144 still listed. A shared certificate points to a common build or key, such as a tool's default, and is not evidence of a single operator.

87f2085c32b6a2cc709b365f55873e207a9caa10bffecf2fd16d3cf9d94d390c

self-signed · validity 2015-05-20 → 2025-05-17 · 2048-bit

feed checked 2026-10-30 17:37 UTC TLP:CLEAR

hosts 146 144 still listed

listings 163

networks 55

first seen 2026-08-22

Ports

:44372:844311:184438:370014:74433:11112:33882:44432

The 8 ports with the most hosts, of 62.

Detection packs

Rules for this hub's 144 still-listed hosts, across all 2 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Suricata rules Sigma rules View in the live feed

Hosts · page 1 of 2

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

49.232.42.116Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 39.100.64.125Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 8.222.166.74Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-30 192.3.251.109Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30 18.143.76.7Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-27 146.19.216.170Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28 146.19.216.163Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28 120.79.64.164Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 110.42.225.241Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 104.234.26.31Cobalt StrikeAS134677 · Dromatics Systems Ptelast confirmed 2026-10-28 8.156.80.127Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-25 124.220.22.82Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 1.94.100.198Cobalt StrikeAS55990 · Huawei Cloud Service data centerlast confirmed 2026-10-24 119.45.236.76Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-24 103.117.136.32Cobalt StrikeAS401696 · cognetcloudlast confirmed 2026-10-19 140.143.193.143Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 45.130.147.87Cobalt StrikeAS49392 · LLC Baxetlast confirmed 2026-10-19 1.117.74.144Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 64.177.112.233Cobalt StrikeAS20473 · The Constant Companylast confirmed 2026-10-30 47.122.111.172Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-14 192.3.166.110Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30 52.205.177.11Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-10-14 3.98.91.44Cobalt StrikeAS16509 · Amazon.comlast confirmed 2026-10-23 43.139.173.26Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-20 117.158.148.164Cobalt StrikeAS24445 · Henan Mobile Communicationslast confirmed 2026-10-30 8.148.241.203Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-11 104.143.204.78Cobalt StrikeAS26383 · Baxet Grouplast confirmed 2026-10-15 203.98.68.25Cobalt StrikeAS215117 · HosterDaddy Privatelast confirmed 2026-10-30 8.166.128.186Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-30 49.235.158.141Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 47.104.219.81Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-09 43.136.92.170Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-07 114.66.27.110Cobalt StrikeAS136188 · NINGBO, ZHEJIANG Province, P.R.Chinalast confirmed 2026-10-01 54.162.178.249Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-09-27archived 23.238.82.42Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-30 209.38.82.85Cobalt StrikeAS14061 · DigitalOceanlast confirmed 2026-10-13 82.156.186.185Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 141.255.162.236Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-09-26 123.207.214.140Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 85.11.182.104Cobalt StrikeAS209101 · IP Vendettalast confirmed 2026-10-30 203.98.68.24Cobalt StrikeAS215117 · HosterDaddy Privatelast confirmed 2026-10-30 176.123.5.4Cobalt StrikeAS200019 · ALEXHOSTlast confirmed 2026-10-30 45.33.67.128Cobalt StrikeAS63949 · Akamai Connected Cloudlast confirmed 2026-09-22 154.219.101.56Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-01 20.231.59.220Cobalt StrikeAS8075 · Microsoftlast confirmed 2026-10-12 42.193.227.214Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-01 45.192.248.45Cobalt StrikeAS61112 · AKILElast confirmed 2026-10-30 111.228.5.127Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-30 65.49.233.218Cobalt StrikeAS25820 · IT7 Networkslast confirmed 2026-09-10 38.76.183.197Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-10-30 8.163.59.20Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30 38.147.185.54Cobalt StrikeAS42960 · VH Globallast confirmed 2026-09-17 8.146.228.220Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-10 149.50.116.109Cobalt StrikeAS201814 · MEVSPACE sp. z o.olast confirmed 2026-10-05 42.193.123.90Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-10 178.32.16.167Cobalt StrikeAS16276 · OVHlast confirmed 2026-09-15 114.132.216.210Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-16 106.55.47.62Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-21 106.55.46.152Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-29 47.236.56.15Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-30 103.119.47.222Cobalt StrikeAS135330 · ADCDATA.COMlast confirmed 2026-09-29 203.91.75.89Cobalt StrikeAS400619 · AROSSCLOUDlast confirmed 2026-10-19 49.232.21.222Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-16 101.201.103.158Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-15 113.250.188.15Cobalt StrikeAS134420 · Chongqing Telecomlast confirmed 2026-10-30 103.212.186.85Cobalt StrikeAS401701 · cognetcloudlast confirmed 2026-09-09 114.132.46.254Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-26 8.145.60.152Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-18 223.109.142.7Cobalt StrikeAS56046 · China Mobile communicationslast confirmed 2026-10-20 111.231.116.164Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 106.54.21.74Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-15 47.113.206.140Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-08 43.155.9.112Cobalt StrikeAS132203 · Tencent Building, Kejizhongyi Avenuelast confirmed 2026-10-02 198.23.196.130Cobalt StrikeAS36352 · HostPapalast confirmed 2026-10-20 173.208.167.73Cobalt StrikeAS32097 · WholeSale Internetlast confirmed 2026-10-30 52.87.32.4Cobalt StrikeAS14618 · Amazon.comlast confirmed 2026-09-07archived 2.28.71.175Cobalt StrikeAS24940 · Hetzner Onlinelast confirmed 2026-10-20 141.255.162.234Cobalt StrikeAS51852 · Private Layerlast confirmed 2026-09-18 188.227.14.105Cobalt StrikeAS35000 · JSC "Severen-Telecom"last confirmed 2026-10-14 43.142.137.169Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-02 169.239.128.43Cobalt StrikeAS61138 · Zappie Hostlast confirmed 2026-10-23 212.14.244.222Cobalt StrikeAS12975 · Palestine Telecommunications Company…last confirmed 2026-10-30 137.220.194.15Cobalt StrikeAS152194 · CTG Serverlast confirmed 2026-10-25 47.86.184.71Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-10-30 49.233.202.218Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-22 191.223.41.183Cobalt StrikeAS140227 · Hong Kong Communications Internationa…last confirmed 2026-09-13 150.158.102.111Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-10 60.217.23.146Cobalt StrikeAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-10-28 103.6.169.62Cobalt StrikeAS36007 · Kamateralast confirmed 2026-09-01 62.72.42.58Cobalt StrikeAS141995 · Contabo Asia Privatelast confirmed 2026-10-13 106.55.25.253Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-31 104.168.102.116Cobalt StrikeAS36352 · HostPapalast confirmed 2026-09-09 101.42.136.73Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-09-05 8.134.166.14Cobalt StrikeAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-02 47.79.21.106Cobalt StrikeAS45102 · Alibaba (US) Technologylast confirmed 2026-09-11 209.200.246.194Cobalt StrikeAS215311 · Regxa Company for Information Technol…last confirmed 2026-09-08 117.72.182.5Cobalt StrikeAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-30 193.112.191.222Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 192.144.171.134Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30 175.178.230.164Cobalt StrikeAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-08-29

Listed in error?

These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.