# hollowpoint.rules — generated 2026-09-15 09:38 UTC — 370 rules — TLP:CLEAR
# source: https://publicmosaic.com/indicators — published for defensive use
# scope: ja4x 7022c563de38_7022c563de38_bf0f0589fc03 — https://publicmosaic.com/ja4x/7022c563de38_7022c563de38_bf0f0589fc03
# rev:2 — alert tcp on address and port; alert tls with tls.cert_fingerprint only where the full
#   certificate SHA-256 is published. REPLACE any rev:1 file (every rule was alert tls) rather than
#   loading it beside this one: a same-sid different-text pair is a duplicate Suricata refuses.
# live set only — archived episodes omitted: 146
# Rules may lag a withdrawal by up to five minutes (edge cache); the hub page is authoritative.
alert tls $HOME_NET any -> 1.13.165.181 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5c48ed46502227edaa74dd3bd96c2bc568e80eb16bd4adbe212f8c3dc88ea0b0"; reference:url,publicmosaic.com/indicators; sid:9103720; rev:2;)
alert tls $HOME_NET any -> 1.14.73.118 34091 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1469697b4db2de18d2aea69f1e3f3979a7943702c83332f136ab43a299fd256"; reference:url,publicmosaic.com/indicators; sid:9104692; rev:2;)
alert tls $HOME_NET any -> 2.27.62.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f7e5bd2ae729253996a5470ce150b7b7499c463db54bb77e8caed626575983f8"; reference:url,publicmosaic.com/indicators; sid:9100073; rev:2;)
alert tls $HOME_NET any -> 2.56.118.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bdb86209a000c38ddbfe0cfcf3763b4a9f66b146af212a378d6e587b544bfd89"; reference:url,publicmosaic.com/indicators; sid:9105002; rev:2;)
alert tls $HOME_NET any -> 2.58.197.179 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4b364819133a785f465de5298b1aba031623aaa2c500ec07b2b52b57d54042bb"; reference:url,publicmosaic.com/indicators; sid:9100411; rev:2;)
alert tls $HOME_NET any -> 3.39.249.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c828620a0146c0a400664411620ef3c68102294cb6b9c8df35ec80f8529389c3"; reference:url,publicmosaic.com/indicators; sid:9103719; rev:2;)
alert tls $HOME_NET any -> 4.154.203.165 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"614240bb1a61dc1dcf4d902132e5055019b95a94803c774f6bce39c5a446e8be"; reference:url,publicmosaic.com/indicators; sid:9105001; rev:2;)
alert tls $HOME_NET any -> 5.175.189.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"90ecc40371875c02acad9fb5add083d7e18e7b884e1ffc90967e908739d5064c"; reference:url,publicmosaic.com/indicators; sid:9100042; rev:2;)
alert tls $HOME_NET any -> 8.141.117.9 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ce274088c3d60dcf2148d48a5510c86b977b953b71afeb1672b1e00e90fbd4cd"; reference:url,publicmosaic.com/indicators; sid:9106749; rev:2;)
alert tls $HOME_NET any -> 8.211.194.92 41076 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"95f72643009c1d4c8d2fe29be7702620f5e252a54f76dff855c52c2712003e68"; reference:url,publicmosaic.com/indicators; sid:9100038; rev:2;)
alert tls $HOME_NET any -> 8.219.149.222 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7413f48ab9a204cdd2e79cb84746c02f1907a85a0701cf8281218f2e90e90685"; reference:url,publicmosaic.com/indicators; sid:9100410; rev:2;)
alert tls $HOME_NET any -> 13.231.5.121 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a5fe246decb3c11cbd0719aef0c1b160fd18d3640e6dcaa17466a2417980022a"; reference:url,publicmosaic.com/indicators; sid:9100702; rev:2;)
alert tls $HOME_NET any -> 14.103.50.128 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad726caaf8a84af3fca8ec22515bebce3ca5a99bf7865084ebf17659d96a6023"; reference:url,publicmosaic.com/indicators; sid:9101300; rev:2;)
alert tls $HOME_NET any -> 15.204.66.40 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d0578ddc0dcfae2ed5471918784563f8e88ff811de72cce9ff082a299a1cbed0"; reference:url,publicmosaic.com/indicators; sid:9103718; rev:2;)
alert tls $HOME_NET any -> 15.204.173.19 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"707de2f2ff6627b6fc9f62bd0580ed4ab33f591ca1261b2654030b14477e1357"; reference:url,publicmosaic.com/indicators; sid:9103717; rev:2;)
alert tls $HOME_NET any -> 15.204.248.160 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"324b17f2061ff8de7ae11c23871997c6789f0748ec90ed3c19f6c469d9fd89a8"; reference:url,publicmosaic.com/indicators; sid:9100409; rev:2;)
alert tls $HOME_NET any -> 15.235.166.83 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"eff1a70f5ca124946a6cde82c9b9526647c64c2ac1af0df9a0fb60c7e7ff8ada"; reference:url,publicmosaic.com/indicators; sid:9103716; rev:2;)
alert tls $HOME_NET any -> 18.136.148.19 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bc02ffd29497187c20ccc3fc89442b3034c39d8850ec0ef0bf4fd9b1a0c30fd6"; reference:url,publicmosaic.com/indicators; sid:9100786; rev:2;)
alert tls $HOME_NET any -> 18.139.162.58 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b83fe08f44d393495ed9cdf51e0640f5b1d85727353eb7809b567f76e9914c13"; reference:url,publicmosaic.com/indicators; sid:9100813; rev:2;)
alert tls $HOME_NET any -> 20.118.243.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e710ba12ede9d6d42fd771951ca4f71e18e40a3a751b80c7b14badd5d31f2cd"; reference:url,publicmosaic.com/indicators; sid:9100398; rev:2;)
alert tls $HOME_NET any -> 20.127.244.233 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"255a6f7225512f11a9820fdc5b799d5ed84c5f2e792e4490275c57be107fca72"; reference:url,publicmosaic.com/indicators; sid:9100400; rev:2;)
alert tls $HOME_NET any -> 20.205.136.20 65350 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7bf4bd9b6413be38247241fb2b8f3a8b25d0466983f48300982f3399b1c61fa9"; reference:url,publicmosaic.com/indicators; sid:9106211; rev:2;)
alert tls $HOME_NET any -> 23.27.24.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23e245201ce240f543c5a51eac686178ffba1baf74c05297e9a12f09d45ade34"; reference:url,publicmosaic.com/indicators; sid:9101751; rev:2;)
alert tls $HOME_NET any -> 23.94.145.203 18080 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"24862feeb4940bafb0d423ded8860ce81ff5382594f7df97d7acd3cc912a7f27"; reference:url,publicmosaic.com/indicators; sid:9100062; rev:2;)
alert tls $HOME_NET any -> 23.94.206.113 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e06deb4fb0bcf1c557fc6d369729cff8775cffdfa4a2c8e2473984b3422a0009"; reference:url,publicmosaic.com/indicators; sid:9106006; rev:2;)
alert tls $HOME_NET any -> 23.94.252.82 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1b6451e2be2bc944ace8edb01fc997ddf936aa997ae09acd7c92e1423c49be1e"; reference:url,publicmosaic.com/indicators; sid:9100742; rev:2;)
alert tls $HOME_NET any -> 23.95.230.28 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e512d0f003385b9ad48e6c6c9b055c41abdaf006326cad0ec4367053c236470"; reference:url,publicmosaic.com/indicators; sid:9100061; rev:2;)
alert tls $HOME_NET any -> 23.254.130.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8721e0566bd13b47cf689c308788b6c09966ec3f9f5ab14879c6916a1dbe0270"; reference:url,publicmosaic.com/indicators; sid:9105103; rev:2;)
alert tls $HOME_NET any -> 23.254.240.220 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8721e0566bd13b47cf689c308788b6c09966ec3f9f5ab14879c6916a1dbe0270"; reference:url,publicmosaic.com/indicators; sid:9100063; rev:2;)
alert tls $HOME_NET any -> 24.144.82.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"56617bd8278bbbf7378642d21e1e7529c7c721fbe00c130f7811f05471585f81"; reference:url,publicmosaic.com/indicators; sid:9100408; rev:2;)
alert tls $HOME_NET any -> 31.6.1.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"526ebba44bb6e76b2a2bd889a16e401bb2a685f621855b44ac57749f23b87784"; reference:url,publicmosaic.com/indicators; sid:9100784; rev:2;)
alert tls $HOME_NET any -> 31.76.111.38 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ca77ee74a73805540f462ab2e231eafc4300d77b6e774843760b374b495272b3"; reference:url,publicmosaic.com/indicators; sid:9100056; rev:2;)
alert tls $HOME_NET any -> 31.76.111.243 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ca77ee74a73805540f462ab2e231eafc4300d77b6e774843760b374b495272b3"; reference:url,publicmosaic.com/indicators; sid:9101650; rev:2;)
alert tls $HOME_NET any -> 31.77.220.141 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"732c14027a9d8436bb870f3dffd5206af0264683a78b7b8e9a7b802cc40acb00"; reference:url,publicmosaic.com/indicators; sid:9106005; rev:2;)
alert tls $HOME_NET any -> 31.220.74.13 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c11917994ca842322f4b999b3e1b1e328ceff514aa5b6c9cf88787d47e61bc63"; reference:url,publicmosaic.com/indicators; sid:9103715; rev:2;)
alert tls $HOME_NET any -> 34.53.161.27 35382 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"44fa6a07e4316ced77141b3ea3610eb64a9b8d43ba3f7564011b828fce83380f"; reference:url,publicmosaic.com/indicators; sid:9100054; rev:2;)
alert tls $HOME_NET any -> 34.122.21.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b03f443dbbc0f6cf6cce392413c040ebb96c8734ac8a08369d370a91293dc3a"; reference:url,publicmosaic.com/indicators; sid:9100396; rev:2;)
alert tls $HOME_NET any -> 34.175.95.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d27e8956cbf257a7e52316e455d60d53609742404d5f98b0c0d1c1d74b09d836"; reference:url,publicmosaic.com/indicators; sid:9100399; rev:2;)
alert tls $HOME_NET any -> 34.242.163.197 31333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7c3b8ebe9efcc0da14ee9e1360c3b59c3e30306412f373c6d545a16143e68072"; reference:url,publicmosaic.com/indicators; sid:9105203; rev:2;)
alert tls $HOME_NET any -> 35.212.172.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bccb86077af460f783d73f77c68f71c77dbdcdda128093f362616711ef94509c"; reference:url,publicmosaic.com/indicators; sid:9100407; rev:2;)
alert tls $HOME_NET any -> 35.229.230.203 21 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ae678f17b451c07afc106103c6e90fc93f9e6122e42d05563564769b9c6ae16"; reference:url,publicmosaic.com/indicators; sid:9100055; rev:2;)
alert tls $HOME_NET any -> 35.240.178.188 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6a8f31031eb8e91f03536f8fd8e3004236a735a718526fae8e1fee7cda8bd709"; reference:url,publicmosaic.com/indicators; sid:9100397; rev:2;)
alert tls $HOME_NET any -> 36.150.237.12 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"786824e9824b912b81484392e42c7a746525aac96aeb5a7a2bbfe79be9e67ab6"; reference:url,publicmosaic.com/indicators; sid:9100406; rev:2;)
alert tls $HOME_NET any -> 37.114.41.131 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"220a4d73cbef1e8abba8eeb43dfa11d4b1fc1f46062eecd163ffc33715e3eaca"; reference:url,publicmosaic.com/indicators; sid:9100405; rev:2;)
alert tls $HOME_NET any -> 38.47.122.77 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1071e16e7aaf1efb3e1f484fe41cc5b389aba30448d72a4bdef0af92cdc90df0"; reference:url,publicmosaic.com/indicators; sid:9100404; rev:2;)
alert tls $HOME_NET any -> 38.60.220.112 58741 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7dde61824bcee402ff5b7dd682a2a615577b00e1abb49fb1a443576580b57adb"; reference:url,publicmosaic.com/indicators; sid:9103714; rev:2;)
alert tls $HOME_NET any -> 38.60.241.251 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"451a3ae1a19400db51a4eb8cbbea15682ec351f0d165549ae6332843e600382a"; reference:url,publicmosaic.com/indicators; sid:9100740; rev:2;)
alert tls $HOME_NET any -> 38.76.205.40 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c8ab7a0cd506e68088e888f3fab03c209aed006b96eb3df556702126f15bb91f"; reference:url,publicmosaic.com/indicators; sid:9104687; rev:2;)
alert tls $HOME_NET any -> 38.76.215.245 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"721bbae3a4dfbc6c128cac360e9a36073d38649c8a2177d8299bec21cb4d029a"; reference:url,publicmosaic.com/indicators; sid:9101749; rev:2;)
alert tls $HOME_NET any -> 38.127.216.221 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9601892d64acb7496d0330979802edd6acfa6bcfb55df4ca7a85da579d32c249"; reference:url,publicmosaic.com/indicators; sid:9100830; rev:2;)
alert tls $HOME_NET any -> 38.147.164.81 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"30161e690dc095979bdcf3f60c88b3dd04b01b089c66764b66493a5657e6154d"; reference:url,publicmosaic.com/indicators; sid:9100403; rev:2;)
alert tls $HOME_NET any -> 40.90.235.75 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fccdbd5251090212fa31a40f6ad27ab1eed63a21ce87f758a6f649a5a673709e"; reference:url,publicmosaic.com/indicators; sid:9105000; rev:2;)
alert tls $HOME_NET any -> 42.112.213.93 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"053eb2b23c40183ba31793a0cade1490c662c06a17c7aa283beb4dd033909577"; reference:url,publicmosaic.com/indicators; sid:9100402; rev:2;)
alert tls $HOME_NET any -> 42.193.120.28 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6586095354d2662ccb19332ddf10b48d924d174970c6fd2aa54d2bbd422496c2"; reference:url,publicmosaic.com/indicators; sid:9100401; rev:2;)
alert tls $HOME_NET any -> 43.130.69.135 20214 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c79ccd6591c5f90354bfc4000255c5f6c7f17c4889414bb6949fcc9d042f09d0"; reference:url,publicmosaic.com/indicators; sid:9103130; rev:2;)
alert tls $HOME_NET any -> 43.130.127.89 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0424b5fbf834f142be52c5d5e19d9d8a7f9b17f14df2d40f06026380f3da0e51"; reference:url,publicmosaic.com/indicators; sid:9100395; rev:2;)
alert tls $HOME_NET any -> 43.131.50.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"36f273f7edc494897330cdf318088c81d22375e74e6ec7151f07399fbf25bbbd"; reference:url,publicmosaic.com/indicators; sid:9100698; rev:2;)
alert tls $HOME_NET any -> 43.134.169.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b05320dbc33317a8e0c44b2f9c133a906a42b42202175e4973eabfc50b48d682"; reference:url,publicmosaic.com/indicators; sid:9100437; rev:2;)
alert tls $HOME_NET any -> 43.136.132.144 58443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c157317b48f031845787877215a50708e839e0459e424a115eafa2a3d08b15e9"; reference:url,publicmosaic.com/indicators; sid:9100053; rev:2;)
alert tls $HOME_NET any -> 43.155.215.231 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f14c884caa1d77baf17a6bfda05b1d1dd2867dbb9058714f13bd19c0d71d6b36"; reference:url,publicmosaic.com/indicators; sid:9103713; rev:2;)
alert tls $HOME_NET any -> 43.156.107.94 8887 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"184b21dedc7e9a3cf98a26f0cf47fece9a0067ac9397238e6e0a4e0cc99bb52f"; reference:url,publicmosaic.com/indicators; sid:9100052; rev:2;)
alert tls $HOME_NET any -> 43.156.184.213 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c7e956c59e1c8c2a944b957f2a3eba8ac66dfa53cf4689350685bc1a3e68ebdd"; reference:url,publicmosaic.com/indicators; sid:9101583; rev:2;)
alert tls $HOME_NET any -> 43.157.204.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"48c700cb03fc4616c6e5d7632993939b63a5f79be5d5a2405af23fee41f07e6d"; reference:url,publicmosaic.com/indicators; sid:9103712; rev:2;)
alert tls $HOME_NET any -> 43.157.204.73 51837 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"48c700cb03fc4616c6e5d7632993939b63a5f79be5d5a2405af23fee41f07e6d"; reference:url,publicmosaic.com/indicators; sid:9103711; rev:2;)
alert tls $HOME_NET any -> 43.160.235.200 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6db16b0b17fdd9dee47a674678149718bbb85b217f7c00cbb7e79ee077205255"; reference:url,publicmosaic.com/indicators; sid:9100807; rev:2;)
alert tls $HOME_NET any -> 43.163.208.239 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4a690038e2efdf6e428933d91217de9981bdf1c6ef2fd8b1e057b64900646abf"; reference:url,publicmosaic.com/indicators; sid:9103710; rev:2;)
alert tls $HOME_NET any -> 44.217.217.119 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab6cc0d0662d6fd8def2b2ffb96e63d653a78d0fd60baf39477235852ce5590f"; reference:url,publicmosaic.com/indicators; sid:9101748; rev:2;)
alert tls $HOME_NET any -> 45.32.165.7 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1154766444df8cc471804678124ec5d8cd634092a2c97f2b15f612a5f129fa0c"; reference:url,publicmosaic.com/indicators; sid:9100739; rev:2;)
alert tls $HOME_NET any -> 45.38.20.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"de360b3e9f065ecfb0a814154d0a5df764ae11da43f55956875a63d78378bb60"; reference:url,publicmosaic.com/indicators; sid:9106003; rev:2;)
alert tls $HOME_NET any -> 45.64.52.67 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d6b7f8f1f1a67cd98ab456376a68104d35b50f8dd1416ac2782fa17497d3e8c0"; reference:url,publicmosaic.com/indicators; sid:9104119; rev:2;)
alert tls $HOME_NET any -> 45.74.3.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"064ec1bb25be28fc3885d3f0755072ead056562b78895fe1b27f65a57d4c73d2"; reference:url,publicmosaic.com/indicators; sid:9100047; rev:2;)
alert tls $HOME_NET any -> 45.74.31.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ad9a81f7f300769e307588613a55a8563197229e170ce7e42ea1138d5cb583c"; reference:url,publicmosaic.com/indicators; sid:9100394; rev:2;)
alert tls $HOME_NET any -> 45.125.67.196 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ece70edc608245f25b2762b8acff990f1c8af58f9caad2d6e959b1cdc9998fa"; reference:url,publicmosaic.com/indicators; sid:9101145; rev:2;)
alert tls $HOME_NET any -> 45.136.13.14 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05518cef42fee350b42a2af90d8d5081358c149b1eea5b36203a29cee0f3f6aa"; reference:url,publicmosaic.com/indicators; sid:9100393; rev:2;)
alert tls $HOME_NET any -> 45.136.15.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"27530809ecf9400907f7d467fdf49d2cb162d3bd3d6cf76c3352d1589163fa3b"; reference:url,publicmosaic.com/indicators; sid:9100389; rev:2;)
alert tls $HOME_NET any -> 45.141.215.195 59404 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0991a6fdfec181b2546b4a2f043f3870988d95f6698c043743a91e22be4cccc9"; reference:url,publicmosaic.com/indicators; sid:9100050; rev:2;)
alert tls $HOME_NET any -> 45.142.31.82 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23b00a321d97c779f6e81da95c72d594c76ce9f4c8edc21b4d4fd159314bc276"; reference:url,publicmosaic.com/indicators; sid:9103709; rev:2;)
alert tls $HOME_NET any -> 45.142.143.176 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e5a8ac41a22549eaf7a5e2e6345e26e0e449980859debb231df679a124a7d5a4"; reference:url,publicmosaic.com/indicators; sid:9100771; rev:2;)
alert tls $HOME_NET any -> 45.153.34.164 61443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d1f54996152bf05fd1fc8a19c0f23d749ce61fb85fd8ef4780206d7bf92fac12"; reference:url,publicmosaic.com/indicators; sid:9100049; rev:2;)
alert tls $HOME_NET any -> 45.154.98.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8bbb60ba8593ba80899099897dcb888e1db56a3537440736b076ade6a97a4efe"; reference:url,publicmosaic.com/indicators; sid:9106620; rev:2;)
alert tls $HOME_NET any -> 45.221.118.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b320ef0d0336e953692773b254eea76f72f1e339182b98b5e8d286f462d0db15"; reference:url,publicmosaic.com/indicators; sid:9100048; rev:2;)
alert tls $HOME_NET any -> 46.8.101.202 61337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d016f19d76edddb535161c8c1401138270103d0ff442746b1dd58decc796f96e"; reference:url,publicmosaic.com/indicators; sid:9100046; rev:2;)
alert tls $HOME_NET any -> 46.16.35.120 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a8105d8c4e3fb69883da4d6eb20263d16f247798b847c08d9dafa3e10b6cba34"; reference:url,publicmosaic.com/indicators; sid:9106002; rev:2;)
alert tls $HOME_NET any -> 46.101.64.237 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"04e50f0d2cf7b67487c0b0c34abb09a61858541f62618b4732a5be197f2487ed"; reference:url,publicmosaic.com/indicators; sid:9100392; rev:2;)
alert tls $HOME_NET any -> 46.151.182.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7fda6f6135fbf79b8e2ce2328bf381a5ec06ad4ee39a499159e0773f9c9a7631"; reference:url,publicmosaic.com/indicators; sid:9100391; rev:2;)
alert tls $HOME_NET any -> 47.84.125.171 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0746f5948d21c602c1eec2494e5604c1542c2499d5b29cc5697993b3065adcce"; reference:url,publicmosaic.com/indicators; sid:9103708; rev:2;)
alert tls $HOME_NET any -> 47.89.175.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"45a7a202f2135ae3f24912b27159190a0b037d6e76fc482b417d6631bbe5a773"; reference:url,publicmosaic.com/indicators; sid:9100390; rev:2;)
alert tls $HOME_NET any -> 47.91.30.143 40000 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad7f791d3cc344eb2da70149849c3ccbc131deb14ba7e42063a765844985e866"; reference:url,publicmosaic.com/indicators; sid:9103707; rev:2;)
alert tls $HOME_NET any -> 47.93.159.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3afea977b7a8f6f41db33eaea131ce59376d94e1af8792afad315aa03b7b76e6"; reference:url,publicmosaic.com/indicators; sid:9100388; rev:2;)
alert tls $HOME_NET any -> 47.93.243.161 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f3ad06f47e3f1e07a83ffcf7b51882987e69c2f16324e0aa0811a24dee1a4dcd"; reference:url,publicmosaic.com/indicators; sid:9103406; rev:2;)
alert tls $HOME_NET any -> 47.104.0.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92e4322129c27e7bda00c79ad2c88c55172efef069d9bbe6dfc8e59a0528961d"; reference:url,publicmosaic.com/indicators; sid:9100783; rev:2;)
alert tls $HOME_NET any -> 47.116.113.15 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9d8f783ce0268d1df5970d991fb3ab53321b68a8c32620a990495c77b6f6ac1b"; reference:url,publicmosaic.com/indicators; sid:9101647; rev:2;)
alert tls $HOME_NET any -> 47.120.46.210 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6be6fa70608e7ceb3ddd965b296ac7cfcef4d03a10ef1c4128130cc9aa096c4d"; reference:url,publicmosaic.com/indicators; sid:9100387; rev:2;)
alert tls $HOME_NET any -> 47.121.136.51 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5cc5748741d65e34659f3d19f1fc7ce16abb31f524c5ce78f7d562f2d7f92f70"; reference:url,publicmosaic.com/indicators; sid:9103706; rev:2;)
alert tls $HOME_NET any -> 47.237.100.236 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5b72209c38e50c84b5cf00a68f2fe131abf633e45061eda447748f9b246f52ba"; reference:url,publicmosaic.com/indicators; sid:9100386; rev:2;)
alert tls $HOME_NET any -> 49.7.54.77 50051 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"42130ee9b6a9db4d6974ef4ec89d8c9ab5fedf5764d40beddbcb1b5221f2dade"; reference:url,publicmosaic.com/indicators; sid:9103705; rev:2;)
alert tls $HOME_NET any -> 49.232.60.192 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"eada92eb116279506de4bccb2a81e49f4cdfb6fa8a942c1788c90d0cb4181685"; reference:url,publicmosaic.com/indicators; sid:9103704; rev:2;)
alert tls $HOME_NET any -> 49.232.170.10 29180 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"14937c86654dd3165ec87f51387e84c36a0461325661489161326b416a6cafa4"; reference:url,publicmosaic.com/indicators; sid:9100044; rev:2;)
alert tls $HOME_NET any -> 51.15.8.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2af22687b4365ac1908cf1f9d1dec412f05a131277d63013c3dd2db776331c16"; reference:url,publicmosaic.com/indicators; sid:9100385; rev:2;)
alert tls $HOME_NET any -> 51.38.146.21 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bc53cceff3c2c42822f0e451da8e42c6b140e5966b811e752d1d5fb037888e14"; reference:url,publicmosaic.com/indicators; sid:9100697; rev:2;)
alert tls $HOME_NET any -> 51.75.62.52 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7dccde44307b50b16e74d4af9a849382f68de0b90fd6bb2986ce32bc01cfd427"; reference:url,publicmosaic.com/indicators; sid:9100384; rev:2;)
alert tls $HOME_NET any -> 51.83.133.9 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"930a6af46a9ca249ce15c05f92946edd7905f4af4269d30dd06ad102f80ec442"; reference:url,publicmosaic.com/indicators; sid:9100383; rev:2;)
alert tls $HOME_NET any -> 51.83.185.120 9321 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"421decc7993427e79a9a5c546b64820a989c931857b88d0bc021b597697d08d3"; reference:url,publicmosaic.com/indicators; sid:9103703; rev:2;)
alert tls $HOME_NET any -> 51.195.41.45 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"711621315aeec21118ab023d0604234ee40caa46b52792b3dcdabbfb83291cf1"; reference:url,publicmosaic.com/indicators; sid:9103702; rev:2;)
alert tls $HOME_NET any -> 52.51.21.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d860bf752f94466474dec8cee6f9f8d9868c5e2ab31c83926a6623ee19202f8b"; reference:url,publicmosaic.com/indicators; sid:9103701; rev:2;)
alert tls $HOME_NET any -> 52.143.174.249 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"340770e22b7e54175718025c4eb8dd2a11d21ee53de4b8935e218a4d479d1e96"; reference:url,publicmosaic.com/indicators; sid:9100382; rev:2;)
alert tls $HOME_NET any -> 52.173.131.28 4444 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"243a3b5f1d6f598fd773c42f0156acc3b736e1a87041415adf3fbba2a5e7dc5c"; reference:url,publicmosaic.com/indicators; sid:9100380; rev:2;)
alert tls $HOME_NET any -> 52.175.50.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f9e68795f3190606058dda701a8ca12a3ecc5963d5f0b5ccbd7fd362dbc3bb2c"; reference:url,publicmosaic.com/indicators; sid:9101299; rev:2;)
alert tls $HOME_NET any -> 54.46.17.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d61910f85b0db0998a4ac22c5945f7070ed10f115e964113f733caaf34bcd34a"; reference:url,publicmosaic.com/indicators; sid:9104118; rev:2;)
alert tls $HOME_NET any -> 57.129.110.30 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47b99cddc4f529533c4cb8252d441fffae99f5ea683bcee45629957d835ade61"; reference:url,publicmosaic.com/indicators; sid:9100381; rev:2;)
alert tls $HOME_NET any -> 57.158.27.132 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"588587c78081378a58269b137eef127af411d92e5f1a8f29f6a1877c639765f3"; reference:url,publicmosaic.com/indicators; sid:9100379; rev:2;)
alert tls $HOME_NET any -> 62.60.159.153 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"586c488d00e9c570a703b649071406507a7d0cfb4f4475bef7605206f5dd0f4c"; reference:url,publicmosaic.com/indicators; sid:9100436; rev:2;)
alert tls $HOME_NET any -> 62.69.131.43 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"826da3da5058e110de452048b05f7d20b9da336d5e704500d409ed276771800a"; reference:url,publicmosaic.com/indicators; sid:9103700; rev:2;)
alert tls $HOME_NET any -> 64.7.198.138 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8494443f40f77c2d3100a072d2f75ca8c5bc00d0fcec66790f4254c52e8c7477"; reference:url,publicmosaic.com/indicators; sid:9104253; rev:2;)
alert tls $HOME_NET any -> 64.23.139.223 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"441d38020bfefcba7d86348e01d943203ed36b07ca70b8ce17bc90c58312abe1"; reference:url,publicmosaic.com/indicators; sid:9100378; rev:2;)
alert tls $HOME_NET any -> 64.23.184.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2a2dd98a32976d364e644fa97b0c81d99d7c394e66530fd5abf4abd812411ef6"; reference:url,publicmosaic.com/indicators; sid:9100374; rev:2;)
alert tls $HOME_NET any -> 64.23.192.235 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7ff9aab4bf0032576495fefdef8a08aa5a31386d3508713ee7bfc212cd9e15f8"; reference:url,publicmosaic.com/indicators; sid:9100376; rev:2;)
alert tls $HOME_NET any -> 64.23.254.205 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5851efc83ae587d18f8b30ee706e558c8b483ee6061ad5f792d18552d679332c"; reference:url,publicmosaic.com/indicators; sid:9103698; rev:2;)
alert tls $HOME_NET any -> 64.176.41.241 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0c1503894c66f6a2e1c909bef122d3b2d5310cb70d45b365126dec04e18980b5"; reference:url,publicmosaic.com/indicators; sid:9100377; rev:2;)
alert tls $HOME_NET any -> 64.227.87.165 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b2ebd94264585e370dfa54bc24ec1a19803f55fb34d87a5f7d7901728abc7c18"; reference:url,publicmosaic.com/indicators; sid:9100373; rev:2;)
alert tls $HOME_NET any -> 64.235.35.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cd30a1ae7c4805dffe62b55a20e13291e8e9572e5ae402fcee0f937fe2f75e01"; reference:url,publicmosaic.com/indicators; sid:9100375; rev:2;)
alert tls $HOME_NET any -> 66.154.103.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"81419462a35f5c159ff138df91f47da70edf13828ccdc847951b6c1d35c4f7f0"; reference:url,publicmosaic.com/indicators; sid:9100372; rev:2;)
alert tls $HOME_NET any -> 66.179.136.167 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3aa0be522f57fc3e50b1ce221bd9f6f2c96b4dc3ae07337476c3ebf404fade2f"; reference:url,publicmosaic.com/indicators; sid:9100371; rev:2;)
alert tls $HOME_NET any -> 66.187.5.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"07e02c3355f7085464bb490147c9360ecdca850e97e22cd780ce90ee4b255182"; reference:url,publicmosaic.com/indicators; sid:9101535; rev:2;)
alert tls $HOME_NET any -> 67.205.159.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88291427729e68ca28aa65b250a058ca92326417fd08182d977855cd25de37ba"; reference:url,publicmosaic.com/indicators; sid:9101644; rev:2;)
alert tls $HOME_NET any -> 68.178.202.150 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9101643; rev:2;)
alert tls $HOME_NET any -> 68.178.205.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9100370; rev:2;)
alert tls $HOME_NET any -> 68.183.144.101 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"708fab8c575a06b53ca845d227b7df8de41a82d1774841d023be391c245b82bd"; reference:url,publicmosaic.com/indicators; sid:9103697; rev:2;)
alert tls $HOME_NET any -> 74.0.42.242 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"07feb6ba0dcae5859b007a4f96bfc756544f6ed01ad0046defc77e5548bc8898"; reference:url,publicmosaic.com/indicators; sid:9101298; rev:2;)
alert tls $HOME_NET any -> 77.42.75.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2d1d524bf4ee585cd5aa7666a7bcd227800b31d0099fe84b513c8e24ba776cde"; reference:url,publicmosaic.com/indicators; sid:9101297; rev:2;)
alert tls $HOME_NET any -> 78.17.212.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8eaca1e0eba3b55d47e159ff220fdef83b3214315e68576f0734b81ef274b056"; reference:url,publicmosaic.com/indicators; sid:9100831; rev:2;)
alert tls $HOME_NET any -> 79.137.77.63 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2df141e49ad1c4f2da70b3d93d57b20157ee3bed59803fa70343e0891c3f0170"; reference:url,publicmosaic.com/indicators; sid:9104999; rev:2;)
alert tls $HOME_NET any -> 80.75.218.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f5f94694734d0493627d788569044738bb343ede37789ccaed79f36f64b51ce6"; reference:url,publicmosaic.com/indicators; sid:9103696; rev:2;)
alert tls $HOME_NET any -> 81.17.100.251 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a61212066303d57ae0a2c1af8d085b64bfee9aebf7cc9ba7cc3f33529ff2d075"; reference:url,publicmosaic.com/indicators; sid:9106619; rev:2;)
alert tls $HOME_NET any -> 81.71.51.134 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270f2bb98c1505557c4a2993f8be06a6543ec90ad07d7172acbdb8055aec9e41"; reference:url,publicmosaic.com/indicators; sid:9101296; rev:2;)
alert tls $HOME_NET any -> 82.29.53.100 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"19f31b53147e0f25472dd99769a148e91be2e3d43c7fcb944582ddd71aaca96c"; reference:url,publicmosaic.com/indicators; sid:9100369; rev:2;)
alert tls $HOME_NET any -> 82.165.79.60 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0ba516c56602cae85871dce3792cf6a71a064baf2359169ccdfa4f35033ec64"; reference:url,publicmosaic.com/indicators; sid:9100368; rev:2;)
alert tls $HOME_NET any -> 82.165.218.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d58c2b5d6ebed038ea8c15adba6c243c4900f886e518d2c21015e70034c605c5"; reference:url,publicmosaic.com/indicators; sid:9101496; rev:2;)
alert tls $HOME_NET any -> 84.247.191.49 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"794c80002bd3ed61a7dfd8122335e2a3306c4b56a01b612b4fdff7cbe904a266"; reference:url,publicmosaic.com/indicators; sid:9100367; rev:2;)
alert tls $HOME_NET any -> 85.137.58.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"715b2ac4b0c5a9d3d3c80665646305bf3ab2da90b41ab8281ad2c3f7d57c444d"; reference:url,publicmosaic.com/indicators; sid:9105127; rev:2;)
alert tls $HOME_NET any -> 85.137.63.86 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cce46420b05dbd0772c65689fec4ae7da99c68b08000455fecb611c51efedb61"; reference:url,publicmosaic.com/indicators; sid:9100811; rev:2;)
alert tls $HOME_NET any -> 85.215.44.146 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e2ef078404f28cf55dbab78439d4d450a9025c03f0472118ee3735b295614d19"; reference:url,publicmosaic.com/indicators; sid:9100366; rev:2;)
alert tls $HOME_NET any -> 85.239.144.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ac6aa716391a0aa16ccae02e1cf24e0fcf0e53bcf2bb4807d0a6dac1963a0995"; reference:url,publicmosaic.com/indicators; sid:9101747; rev:2;)
alert tls $HOME_NET any -> 89.34.90.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3fa5091feab695f17358fc151c5094a9ceb201537831119a3054d392c9b14a50"; reference:url,publicmosaic.com/indicators; sid:9101659; rev:2;)
alert tls $HOME_NET any -> 89.106.78.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"665f6839dfb435f06250f8543221a6b599fab8dfb52ec7edb2abf68eaf3d8439"; reference:url,publicmosaic.com/indicators; sid:9100365; rev:2;)
alert tls $HOME_NET any -> 89.106.83.136 36366 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8f18faa476ce7c4ef894710527a4f4478cc6fda37b6a06a27e38533a9322a0ab"; reference:url,publicmosaic.com/indicators; sid:9101660; rev:2;)
alert tls $HOME_NET any -> 89.117.2.145 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"566d402375b6f5a20524859fd7af603546b8db796175bd19878ae5e1e5f31ab7"; reference:url,publicmosaic.com/indicators; sid:9103695; rev:2;)
alert tls $HOME_NET any -> 89.127.233.186 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d680e0fc34d8a127656cb22624f437234e9601e761181f30c94e945e9b97bde8"; reference:url,publicmosaic.com/indicators; sid:9100855; rev:2;)
alert tls $HOME_NET any -> 89.223.95.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100828; rev:2;)
alert tls $HOME_NET any -> 89.223.95.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100827; rev:2;)
alert tls $HOME_NET any -> 89.223.95.176 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100829; rev:2;)
alert tls $HOME_NET any -> 89.223.95.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100826; rev:2;)
alert tls $HOME_NET any -> 89.223.95.179 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100825; rev:2;)
alert tls $HOME_NET any -> 91.92.47.160 37773 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e014838d5ff91ed9da810c4483436212a9c8db2e1c2a6cde5e9e6797c24ca574"; reference:url,publicmosaic.com/indicators; sid:9105125; rev:2;)
alert tls $HOME_NET any -> 91.202.233.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"62ce02d31a21e32203b360c017b105a80e74a698a9c55de143548ffebd3b1f4e"; reference:url,publicmosaic.com/indicators; sid:9100364; rev:2;)
alert tls $HOME_NET any -> 91.208.162.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7740045caa4a2a86ca6a407052dff75717d2a896c7151bab20dbafcfc474fd34"; reference:url,publicmosaic.com/indicators; sid:9100735; rev:2;)
alert tls $HOME_NET any -> 91.242.163.201 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"70297e01fd305a9d1247124d41ebfc9099449c29c9bed0a207e599d08682d314"; reference:url,publicmosaic.com/indicators; sid:9106001; rev:2;)
alert tls $HOME_NET any -> 92.5.166.15 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"72858ef4706c240bacdcdbef3e10ab2cb7f35535d953eb05c74b1d0ff42025f7"; reference:url,publicmosaic.com/indicators; sid:9103988; rev:2;)
alert tls $HOME_NET any -> 92.119.164.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5bd24792ae5d0bbceb166da3ec6fe87613290678d11eb2d4a16be1e3f6a9d6e2"; reference:url,publicmosaic.com/indicators; sid:9100363; rev:2;)
alert tls $HOME_NET any -> 94.125.101.85 3389 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"842d85c9d6bce7a3fd20945c8d6da8cbc08eadcdf454183a94d2fcce45198831"; reference:url,publicmosaic.com/indicators; sid:9106000; rev:2;)
alert tls $HOME_NET any -> 94.125.101.85 7011 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"842d85c9d6bce7a3fd20945c8d6da8cbc08eadcdf454183a94d2fcce45198831"; reference:url,publicmosaic.com/indicators; sid:9106747; rev:2;)
alert tls $HOME_NET any -> 95.38.161.209 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"816529a175c2ec56219e4ce23c39be0b6c78577df4a451ec6dbaf01e624fd872"; reference:url,publicmosaic.com/indicators; sid:9100733; rev:2;)
alert tls $HOME_NET any -> 95.38.176.143 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2e415e825fd13fb521061490d58fff0e478b43f41f807755cd4cec247587cb0f"; reference:url,publicmosaic.com/indicators; sid:9103694; rev:2;)
alert tls $HOME_NET any -> 95.142.37.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"849f152aa15a986374638bebe7a73091af74d0d1faebd87b533f21bbaf5c8733"; reference:url,publicmosaic.com/indicators; sid:9104185; rev:2;)
alert tls $HOME_NET any -> 100.53.240.26 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"301e153d4af4744823e6475eaf79065b17044b8a8ca93a56a24b662582141c56"; reference:url,publicmosaic.com/indicators; sid:9104252; rev:2;)
alert tls $HOME_NET any -> 101.42.96.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4fcebc1d5407c5c32e3d5b5670e2748ee12db311e6d1d207340e96d04876fcfb"; reference:url,publicmosaic.com/indicators; sid:9100362; rev:2;)
alert tls $HOME_NET any -> 101.126.90.250 11337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e67b894597dd726ed7bfbb8bec4075a5596e9f85d1b3c0a131ff5e4ab464f836"; reference:url,publicmosaic.com/indicators; sid:9103839; rev:2;)
alert tls $HOME_NET any -> 103.67.184.198 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab2db5f6f56109c697b2e588196c71801e9948a5c873c4c0057f0db2465cc00f"; reference:url,publicmosaic.com/indicators; sid:9101295; rev:2;)
alert tls $HOME_NET any -> 103.70.77.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"34737b09206387ac5e0688619dc24f3aa3f1fcb214a2dbab83be1e3e5d358d70"; reference:url,publicmosaic.com/indicators; sid:9100361; rev:2;)
alert tls $HOME_NET any -> 103.121.92.150 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"161b6d5cb63b3fe34dd2678725fdabdc514b9e6b0423bd543aca44d4ca400599"; reference:url,publicmosaic.com/indicators; sid:9100360; rev:2;)
alert tls $HOME_NET any -> 103.121.92.249 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0aa2129b4e44d2a8f3d4eafa9cb5f87822e11840acebc22e589688cadbc39ca0"; reference:url,publicmosaic.com/indicators; sid:9100123; rev:2;)
alert tls $HOME_NET any -> 103.121.95.90 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270975a12075bdc98d4509af067855203e4b2b5f5627963e96c63b2ac080765e"; reference:url,publicmosaic.com/indicators; sid:9100359; rev:2;)
alert tls $HOME_NET any -> 103.185.249.13 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270975a12075bdc98d4509af067855203e4b2b5f5627963e96c63b2ac080765e"; reference:url,publicmosaic.com/indicators; sid:9100358; rev:2;)
alert tls $HOME_NET any -> 103.250.172.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a1b317b4efea8f1c9ff26a4b4fdcf172b3bf8f7bb7aad44624cfeb36bad47f0d"; reference:url,publicmosaic.com/indicators; sid:9101744; rev:2;)
alert tls $HOME_NET any -> 103.253.42.34 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cec7a02f5bc9ae3fa169c8076488db4bbb85a8da5567d42783722b0271220449"; reference:url,publicmosaic.com/indicators; sid:9100435; rev:2;)
alert tls $HOME_NET any -> 103.253.43.20 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8443d73664b5dba863272d2988632350ddb0545762122c903bd0efec9f61fe3f"; reference:url,publicmosaic.com/indicators; sid:9100120; rev:2;)
alert tls $HOME_NET any -> 104.129.54.121 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a9c2a49e139aa442464b3aa7e609e3eb8664f80c153873d33796919e4566b94c"; reference:url,publicmosaic.com/indicators; sid:9103693; rev:2;)
alert tls $HOME_NET any -> 104.131.164.51 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd27296d7a32e193ea6e51b4468b87cc4423df3ba6b53810836e0d7b4fbe3092"; reference:url,publicmosaic.com/indicators; sid:9104251; rev:2;)
alert tls $HOME_NET any -> 104.223.75.156 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e64f951c953a142339805bcf335e289d077b710dfdb3a67d2d1446158e9c9035"; reference:url,publicmosaic.com/indicators; sid:9103987; rev:2;)
alert tls $HOME_NET any -> 104.236.230.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"959a3c71adb986115ca08a6adc133db678ee675a5e218a2738639cc09f8b10a4"; reference:url,publicmosaic.com/indicators; sid:9100357; rev:2;)
alert tls $HOME_NET any -> 104.248.163.130 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05c7761738dcf640eb5f53ff41bf852190db3a6d4d336de5a2b25828289cb6bd"; reference:url,publicmosaic.com/indicators; sid:9100356; rev:2;)
alert tls $HOME_NET any -> 104.253.79.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"efea7df105d0b2dd56f673840016c74f94c481b478c86bc9e9fc341329e54935"; reference:url,publicmosaic.com/indicators; sid:9103692; rev:2;)
alert tls $HOME_NET any -> 106.54.62.203 65530 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7d35afdd1f1346397e041507fab20d5bd96d6d6e203711507778f0f40e78f0ad"; reference:url,publicmosaic.com/indicators; sid:9100115; rev:2;)
alert tls $HOME_NET any -> 107.172.72.178 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c539ac70e565e63efc64a0bf56bc3bd3cc2a22655f5c9ce40a1c464afb77b848"; reference:url,publicmosaic.com/indicators; sid:9100355; rev:2;)
alert tls $HOME_NET any -> 108.143.227.46 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e79db728d3ea047d1290338423dcdd3b68d318c2db4e9fcd6469244685068648"; reference:url,publicmosaic.com/indicators; sid:9100354; rev:2;)
alert tls $HOME_NET any -> 109.233.21.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e5959ce922c87f17a35fb7965a28320e4ea4755eeca2bf5ffc8942db418a32c"; reference:url,publicmosaic.com/indicators; sid:9101627; rev:2;)
alert tls $HOME_NET any -> 109.236.50.145 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8073d5c37be2a686880500518a2292e04ad1a0657274edf107b376982caf3871"; reference:url,publicmosaic.com/indicators; sid:9105830; rev:2;)
alert tls $HOME_NET any -> 114.55.151.60 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"52c2ba814256aa080bb25cfbe8503180525290635fea7cfdfc177ad9c9c28d41"; reference:url,publicmosaic.com/indicators; sid:9101946; rev:2;)
alert tls $HOME_NET any -> 116.118.95.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1ddf68843b80a251d3f3f51b5f9d2628103d98e4fc1c20794a866fbb9e148e00"; reference:url,publicmosaic.com/indicators; sid:9100353; rev:2;)
alert tls $HOME_NET any -> 116.198.204.146 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"57e391ac2e8319c7d42f6f082aa9b651bf703927735a6a7db542bb6f1507f2e0"; reference:url,publicmosaic.com/indicators; sid:9100352; rev:2;)
alert tls $HOME_NET any -> 116.202.158.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"263bee79fa3817fe36ea49211138120eff0c2e35612005ed2675755c0f2bef91"; reference:url,publicmosaic.com/indicators; sid:9100806; rev:2;)
alert tls $HOME_NET any -> 117.148.177.48 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"db84adbd265f981295abdcf3dd9f11ea39da33f411cac499a4cea8fc0b125e3e"; reference:url,publicmosaic.com/indicators; sid:9101534; rev:2;)
alert tls $HOME_NET any -> 118.107.9.178 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9101742; rev:2;)
alert tls $HOME_NET any -> 118.107.9.213 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9104117; rev:2;)
alert tls $HOME_NET any -> 118.107.9.217 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9103838; rev:2;)
alert tls $HOME_NET any -> 118.107.9.233 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9104116; rev:2;)
alert tls $HOME_NET any -> 118.195.163.227 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"85c5ffffa0ad280a809caefe6e294eec6bb29b5fb27b964c9b722d898ab75b9b"; reference:url,publicmosaic.com/indicators; sid:9106817; rev:2;)
alert tls $HOME_NET any -> 120.26.48.207 61001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4c593d4e9bc1fdb1393ccdee22ee94f015784474b30321f2eb094238eafd1794"; reference:url,publicmosaic.com/indicators; sid:9105202; rev:2;)
alert tls $HOME_NET any -> 120.26.146.96 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2f7500875b1ebb80740b25b6c31e81675adf2a3e5f3d75fa62f411d833925050"; reference:url,publicmosaic.com/indicators; sid:9103691; rev:2;)
alert tls $HOME_NET any -> 121.4.43.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b522da120daf13983e4f8456a0f9a715515fa3bf6de50c42aa8033670045a5a"; reference:url,publicmosaic.com/indicators; sid:9104115; rev:2;)
alert tls $HOME_NET any -> 121.43.182.95 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0b9efafd002c0fff391f00d46b32466d6ef1c2669897848c1b0f001aefc7148"; reference:url,publicmosaic.com/indicators; sid:9100351; rev:2;)
alert tls $HOME_NET any -> 121.78.127.232 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2624e5834f8a53b3cf0e882e2ad6158d39a53be29e01cdbf616f3956c9ec05a6"; reference:url,publicmosaic.com/indicators; sid:9100350; rev:2;)
alert tls $HOME_NET any -> 122.114.10.199 8001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83f1a41068402a3c14dfe51b8745527249c3888a7b6937dc339b028d00818e77"; reference:url,publicmosaic.com/indicators; sid:9103690; rev:2;)
alert tls $HOME_NET any -> 123.57.230.199 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"462548e21b77db9f8a5845571f5ba13bb0570711a2622b0d446bb18e1571555f"; reference:url,publicmosaic.com/indicators; sid:9100822; rev:2;)
alert tls $HOME_NET any -> 124.158.5.149 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b13c2a89e37f4308aa1e5640ceefad991d248e5ead3d8363a154c0aea45af0a0"; reference:url,publicmosaic.com/indicators; sid:9100349; rev:2;)
alert tls $HOME_NET any -> 124.222.144.44 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bb27311392242ae1cce1f0f39a4547379db63a6843a74ecbbc8ca9f0d3b373cb"; reference:url,publicmosaic.com/indicators; sid:9100347; rev:2;)
alert tls $HOME_NET any -> 124.243.150.112 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae1e98493dbb0672732ff1792cdfcab0164d7647fa8fc4b929675ee3e5a84a"; reference:url,publicmosaic.com/indicators; sid:9103689; rev:2;)
alert tls $HOME_NET any -> 128.65.199.135 8899 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c37e6bb0ead82b6eadc2c3d39353de1d5413b21e89462011196b9d6163295d35"; reference:url,publicmosaic.com/indicators; sid:9103688; rev:2;)
alert tls $HOME_NET any -> 129.226.150.240 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1076df45f07c971a53dc0df31c5bfc31597eacc9b0ffeb2f5afecd301055a6d"; reference:url,publicmosaic.com/indicators; sid:9105997; rev:2;)
alert tls $HOME_NET any -> 129.226.195.254 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"164902129fafd0fafc03a2a8a19d01c592a5651c06bde7e9e3295f22d065f2b2"; reference:url,publicmosaic.com/indicators; sid:9100348; rev:2;)
alert tls $HOME_NET any -> 130.94.41.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23ac47cd113eb29198e5b596e43a83be89a3f1d83faed3213c1aee26bacd788c"; reference:url,publicmosaic.com/indicators; sid:9103687; rev:2;)
alert tls $HOME_NET any -> 130.94.92.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2f0ae0c48fd2fe50a237c5c09cb18b85cbc5e7f29b05a8230218da64fbe87432"; reference:url,publicmosaic.com/indicators; sid:9100346; rev:2;)
alert tls $HOME_NET any -> 130.94.105.104 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2048037dcd4cc4209cc0ab818fd94ffed56c7373e64db4c02b6c1bd2a3b7ff44"; reference:url,publicmosaic.com/indicators; sid:9106209; rev:2;)
alert tls $HOME_NET any -> 134.122.123.227 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8172ee65e50dff56a12967746d53d3d8019c8f9875ebb81a6ee679dddb005178"; reference:url,publicmosaic.com/indicators; sid:9100433; rev:2;)
alert tls $HOME_NET any -> 134.209.93.110 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"68cb3831a6e7791d52dd7b97267e1dab914617a0750c19999c4ee5a60bbd97f0"; reference:url,publicmosaic.com/indicators; sid:9100345; rev:2;)
alert tls $HOME_NET any -> 136.64.24.207 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ec8ef7d476c5acb1f17a289b9209eacebeaf50ff1cf1786dda8e408ef9d62858"; reference:url,publicmosaic.com/indicators; sid:9104998; rev:2;)
alert tls $HOME_NET any -> 136.110.51.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83566176e4fd65f15421e7a19b8b291fa8becc139462b9a256b2ff9bcfebaeb3"; reference:url,publicmosaic.com/indicators; sid:9100344; rev:2;)
alert tls $HOME_NET any -> 137.116.136.69 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d17ccc63c26d18c6060361ea08c9c56bfe279d99430689a32788e88c728a91cc"; reference:url,publicmosaic.com/indicators; sid:9100343; rev:2;)
alert tls $HOME_NET any -> 137.184.57.89 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83722f9fc34f1afed670032fa8f94b4ba6a40fcda579fb0422e619805fb29f62"; reference:url,publicmosaic.com/indicators; sid:9100342; rev:2;)
alert tls $HOME_NET any -> 137.220.219.243 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8d23f121b37fa17914194ad762725819f8d5a8150e91d2517dc9ae635fe15e6d"; reference:url,publicmosaic.com/indicators; sid:9101741; rev:2;)
alert tls $HOME_NET any -> 138.16.160.172 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"98c25b4cc8cc799488f734b2001bca3ff6a654e0ee08afe362b1694ddca16c0a"; reference:url,publicmosaic.com/indicators; sid:9100432; rev:2;)
alert tls $HOME_NET any -> 138.68.170.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f740834113e0687f7c55c27e06dc1af8941f8938b6af5d6350b96e0d041eb438"; reference:url,publicmosaic.com/indicators; sid:9100341; rev:2;)
alert tls $HOME_NET any -> 138.68.180.119 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"04e50f0d2cf7b67487c0b0c34abb09a61858541f62618b4732a5be197f2487ed"; reference:url,publicmosaic.com/indicators; sid:9100340; rev:2;)
alert tls $HOME_NET any -> 138.197.224.55 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83722f9fc34f1afed670032fa8f94b4ba6a40fcda579fb0422e619805fb29f62"; reference:url,publicmosaic.com/indicators; sid:9100339; rev:2;)
alert tls $HOME_NET any -> 139.162.1.199 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e78b6adfeaaa4a0611e16ec19f7b10a81217c9d4aeac888e46426a255a1ec9d"; reference:url,publicmosaic.com/indicators; sid:9101626; rev:2;)
alert tls $HOME_NET any -> 142.91.109.153 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9a179763011cde1aa17354aea4bfdb2874a865ac2c6adfc720fc7a6181f60ef9"; reference:url,publicmosaic.com/indicators; sid:9100852; rev:2;)
alert tls $HOME_NET any -> 142.93.58.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"554a671de6fc0fddc30143b8f836fb8b5e6b8c1a3e1cb56f5b2eb5fe6d8c9461"; reference:url,publicmosaic.com/indicators; sid:9106618; rev:2;)
alert tls $HOME_NET any -> 143.198.1.58 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7af552d55bf091ac26fc98a9d85a6fec926dfb3167de39bab6adbf5185e84b44"; reference:url,publicmosaic.com/indicators; sid:9100338; rev:2;)
alert tls $HOME_NET any -> 143.198.125.30 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"56f154fb79978f1a87234ff20ca1c0654df618ec8d7477f86e4543696ae594a6"; reference:url,publicmosaic.com/indicators; sid:9100337; rev:2;)
alert tls $HOME_NET any -> 143.198.136.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3556ffe9a9c93cfd534ac894e5f77f561fe11145227b8c1d86b901792f2f2a32"; reference:url,publicmosaic.com/indicators; sid:9100336; rev:2;)
alert tls $HOME_NET any -> 143.198.149.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0144a26ae0c9d9e5d9d7783b1a9de70001e1d14df0cd19fcc229c2f9fb03b73"; reference:url,publicmosaic.com/indicators; sid:9100335; rev:2;)
alert tls $HOME_NET any -> 143.246.217.59 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"676272ca8356aa542b40c4f8cc752f55c97f8fc3f5fb2c6f11142b9bdf1c43fa"; reference:url,publicmosaic.com/indicators; sid:9100108; rev:2;)
alert tls $HOME_NET any -> 144.126.210.142 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"77c3958861bb2afb24bfcd6acd136b27e78e3a360049f8a8fd3da74dc2eb19d1"; reference:url,publicmosaic.com/indicators; sid:9103686; rev:2;)
alert tls $HOME_NET any -> 144.202.31.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7fdd940674d788d115d09ba58cae47011b651b8ec252da1e910db67f8f72513b"; reference:url,publicmosaic.com/indicators; sid:9106746; rev:2;)
alert tls $HOME_NET any -> 144.202.41.78 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1154766444df8cc471804678124ec5d8cd634092a2c97f2b15f612a5f129fa0c"; reference:url,publicmosaic.com/indicators; sid:9100107; rev:2;)
alert tls $HOME_NET any -> 145.239.73.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"64d6bc6ab51aa22033e7f63b213ea40f9de38f9c20f2b82a006302f0b6872ecc"; reference:url,publicmosaic.com/indicators; sid:9106208; rev:2;)
alert tls $HOME_NET any -> 146.56.214.130 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5017255d7a8409408aabc049045b5bb210dfe5f79c8fc31e3c2fd93097c7b056"; reference:url,publicmosaic.com/indicators; sid:9100334; rev:2;)
alert tls $HOME_NET any -> 146.59.63.41 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"45032b5ac8d78fa8c5166e8febc00c1079c05fc5d86a908e1a1bc6f088ffcfe4"; reference:url,publicmosaic.com/indicators; sid:9104250; rev:2;)
alert tls $HOME_NET any -> 146.70.79.45 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab022eddb39549607c97151d39205ebacd4a8816c71bcf23c48774f131172d8e"; reference:url,publicmosaic.com/indicators; sid:9104997; rev:2;)
alert tls $HOME_NET any -> 146.70.158.198 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"08dc3a208a3fb829921c63326b680a08e85e2db1b9487d99b9329e8a6fd43aad"; reference:url,publicmosaic.com/indicators; sid:9100333; rev:2;)
alert tls $HOME_NET any -> 146.70.232.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"be7cbdaf0712389f831ab0e715f9c42b158016a8704ff8ebd57636e5f9b6bb6f"; reference:url,publicmosaic.com/indicators; sid:9106617; rev:2;)
alert tls $HOME_NET any -> 146.190.17.255 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f21de01635c0ae0ea4c435c81b6cfad066cec05b8ea2e7ab14fb4bfe3e0b4600"; reference:url,publicmosaic.com/indicators; sid:9103685; rev:2;)
alert tls $HOME_NET any -> 147.15.78.253 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ce387ac3077c1d89376817969cdcb899f35a2787da0671ebfd7eecc126a675ee"; reference:url,publicmosaic.com/indicators; sid:9100332; rev:2;)
alert tls $HOME_NET any -> 147.50.242.137 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f35f94b8e245171363cd7274f7a0041c45b234cb19058cb89462720681f2dc27"; reference:url,publicmosaic.com/indicators; sid:9105996; rev:2;)
alert tls $HOME_NET any -> 147.78.65.252 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5e7ba0fd36fcca4bb201659c1c35fbd47dbf9770c02f4c9f3e49bad00790f0b1"; reference:url,publicmosaic.com/indicators; sid:9100851; rev:2;)
alert tls $HOME_NET any -> 147.185.197.5 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4c0bbbdb0ccd68f5ff168f037a11c0e4412e985caf6165dc128c976794db9c2c"; reference:url,publicmosaic.com/indicators; sid:9100821; rev:2;)
alert tls $HOME_NET any -> 149.56.12.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88855d525e815fe5b7016229f69e862c643b4f95999398193902da16e668ad8a"; reference:url,publicmosaic.com/indicators; sid:9100331; rev:2;)
alert tls $HOME_NET any -> 149.62.46.25 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6b4605de093824e987511cbb2e55c16c890a929edba93b7a62a487539c806ee9"; reference:url,publicmosaic.com/indicators; sid:9100330; rev:2;)
alert tls $HOME_NET any -> 149.88.73.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f00953ba65cf63d1f0133f48c3693f525737baff5ca9c06d0261a837bbe4bf94"; reference:url,publicmosaic.com/indicators; sid:9100106; rev:2;)
alert tls $HOME_NET any -> 149.104.90.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e546368a0963f931bc1d71de435567e5bb348564040bb23b2e3cc8ff46e600ea"; reference:url,publicmosaic.com/indicators; sid:9101639; rev:2;)
alert tls $HOME_NET any -> 150.5.168.18 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f35257e760d5b2829e09136d8c9071dc0ec942624915b9575b44090394644738"; reference:url,publicmosaic.com/indicators; sid:9100805; rev:2;)
alert tls $HOME_NET any -> 150.40.117.90 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a8db86f2b3aa7dc3b431afa18d287c68e7ef6634ed0fc485ad429f618b3ccd65"; reference:url,publicmosaic.com/indicators; sid:9103986; rev:2;)
alert tls $HOME_NET any -> 150.107.31.116 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1fe3a805a104986f6e92d7c272623d97c33226a30fab16b3fe9fb7d052c37aa3"; reference:url,publicmosaic.com/indicators; sid:9103684; rev:2;)
alert tls $HOME_NET any -> 150.107.31.116 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1fe3a805a104986f6e92d7c272623d97c33226a30fab16b3fe9fb7d052c37aa3"; reference:url,publicmosaic.com/indicators; sid:9100329; rev:2;)
alert tls $HOME_NET any -> 150.109.154.3 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cc4e38e8bfc5340907b5019d6bb4c9984aead14b173a5c14bd2c6a7ca417fbf2"; reference:url,publicmosaic.com/indicators; sid:9105995; rev:2;)
alert tls $HOME_NET any -> 150.158.122.8 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7d46f1eddf42dd1d50746f8bfce23096a606e91f6c5511d93a7f078450fb4804"; reference:url,publicmosaic.com/indicators; sid:9100328; rev:2;)
alert tls $HOME_NET any -> 151.243.126.22 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5cb281d0aaf307f244f86f31dd532892d791551b49bc0b268a51c798f16a13f4"; reference:url,publicmosaic.com/indicators; sid:9105994; rev:2;)
alert tls $HOME_NET any -> 152.42.172.222 9898 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"22107e9685937784e7ce13087d9962971ef074d3be6df88512db3d980775fefc"; reference:url,publicmosaic.com/indicators; sid:9105201; rev:2;)
alert tls $HOME_NET any -> 152.42.207.101 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"230cfd878c159eb7f95599831724e4b1ec923928f8726949f3cb26edb00f62dc"; reference:url,publicmosaic.com/indicators; sid:9103683; rev:2;)
alert tls $HOME_NET any -> 152.53.187.147 58173 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9c1c7a65846d671c6c8cd2a2322aa615c6903e9943ca93fef7047b96c031d6b0"; reference:url,publicmosaic.com/indicators; sid:9100838; rev:2;)
alert tls $HOME_NET any -> 153.75.82.143 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"faadc7aeb1fd4430bbc773c5e73b4cd121ac7036378f7e7f584af474cd44a579"; reference:url,publicmosaic.com/indicators; sid:9100105; rev:2;)
alert tls $HOME_NET any -> 154.31.217.203 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"280faa73d71c02bf9ab2da512ae79e777b4db403ac4520d9cb095055eb68613b"; reference:url,publicmosaic.com/indicators; sid:9101533; rev:2;)
alert tls $HOME_NET any -> 154.38.116.247 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7356035b55588a213812adc3638ff1e968eb244a41222b39e91ea92bfd8def40"; reference:url,publicmosaic.com/indicators; sid:9103334; rev:2;)
alert tls $HOME_NET any -> 154.93.103.232 60317 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3c9b05bd6d3274c56e4a099205f8d8eae7904a4512c6970c316564d457d68091"; reference:url,publicmosaic.com/indicators; sid:9103682; rev:2;)
alert tls $HOME_NET any -> 156.251.16.152 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2e2fe9cc2e749b692b6046a452abc679b58a11588563eab6ba8b8021da812fd8"; reference:url,publicmosaic.com/indicators; sid:9100327; rev:2;)
alert tls $HOME_NET any -> 157.245.14.84 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b149e5caeff1f2bad26b8d2d0d4731960257012baf3cf5729789a9839873f82b"; reference:url,publicmosaic.com/indicators; sid:9100326; rev:2;)
alert tls $HOME_NET any -> 157.254.167.106 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b680d4a8227e02a16157eab857bf9b74c7f96c1bfeaef4fbc1b06a697f784e63"; reference:url,publicmosaic.com/indicators; sid:9105993; rev:2;)
alert tls $HOME_NET any -> 158.160.98.75 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88e1995602c53866ec9f04ca1f88ce56f40c5125c7b538c721ae3deb1676cc3d"; reference:url,publicmosaic.com/indicators; sid:9100102; rev:2;)
alert tls $HOME_NET any -> 158.178.225.215 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3b9c8919745e2a8a05bf9ebad0403af56ced94df2543b81f3f91ee4b8e21cde3"; reference:url,publicmosaic.com/indicators; sid:9100325; rev:2;)
alert tls $HOME_NET any -> 159.65.22.41 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d0a7c9e45820a9cfe5609f7082ab913407efa3688adcc5632f8494872350c6"; reference:url,publicmosaic.com/indicators; sid:9100324; rev:2;)
alert tls $HOME_NET any -> 159.65.113.187 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8c9d1e1eecbf750293e664021853be2d47b242c2aa29c16902f015cdf50bae04"; reference:url,publicmosaic.com/indicators; sid:9100315; rev:2;)
alert tls $HOME_NET any -> 159.65.209.64 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d0a7c9e45820a9cfe5609f7082ab913407efa3688adcc5632f8494872350c6"; reference:url,publicmosaic.com/indicators; sid:9100323; rev:2;)
alert tls $HOME_NET any -> 159.65.231.200 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7ed20a39bb74dad5b91e28d1487034b11c3c1e7bcb4c6b4db203cdefb8ef9d5e"; reference:url,publicmosaic.com/indicators; sid:9100318; rev:2;)
alert tls $HOME_NET any -> 159.89.232.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88ee80f9db6301bce9b389d52b7e3f5939e0d228e0b599bfaa8111156ac42988"; reference:url,publicmosaic.com/indicators; sid:9100321; rev:2;)
alert tls $HOME_NET any -> 159.112.188.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05fb6ba51b3133257f67fc7fc32878ff7a2e62b75c79d06cea9bc3b4520ebb69"; reference:url,publicmosaic.com/indicators; sid:9100101; rev:2;)
alert tls $HOME_NET any -> 159.194.232.217 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8fd52ccc7a06932d3a4e7cf68b63f6ca0374dbe26109b98bf50a0c8ae0674adb"; reference:url,publicmosaic.com/indicators; sid:9105991; rev:2;)
alert tls $HOME_NET any -> 159.203.148.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7af552d55bf091ac26fc98a9d85a6fec926dfb3167de39bab6adbf5185e84b44"; reference:url,publicmosaic.com/indicators; sid:9100314; rev:2;)
alert tls $HOME_NET any -> 161.97.127.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"da899a762848291c722a9140a836fa7edcc76c994c109a4d5401ed56acd87717"; reference:url,publicmosaic.com/indicators; sid:9105200; rev:2;)
alert tls $HOME_NET any -> 161.153.76.241 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b4c2ccb24b570008a86ef66e94379ba9aceceefbe808469e487f3d400003a832"; reference:url,publicmosaic.com/indicators; sid:9100322; rev:2;)
alert tls $HOME_NET any -> 162.243.172.161 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d280fa2c3f22958372e76968f20e438d83fbea4db701c21aad5851cc59b75321"; reference:url,publicmosaic.com/indicators; sid:9103837; rev:2;)
alert tls $HOME_NET any -> 162.254.35.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fdecbf1aa47fd95591608f307cc228b9877b2545cadf193146d1448f8d30ec26"; reference:url,publicmosaic.com/indicators; sid:9100320; rev:2;)
alert tls $HOME_NET any -> 163.53.219.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bf2c31206c782571afbb9d38b570008ecc7094cb7fe6c99cc375ca12a1dba27c"; reference:url,publicmosaic.com/indicators; sid:9100319; rev:2;)
alert tls $HOME_NET any -> 163.53.219.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d4e95bc78d8af82df3bd4102af9af949ef492f61080d23c750049033ad293a41"; reference:url,publicmosaic.com/indicators; sid:9100316; rev:2;)
alert tls $HOME_NET any -> 163.172.45.158 6789 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e466667229c8176133ae3d76be2371ccffc43be38867967a1cf204399adcfff1"; reference:url,publicmosaic.com/indicators; sid:9100099; rev:2;)
alert tls $HOME_NET any -> 163.172.71.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e1405181c13388d8540bc5b4c50217b790e949ba824cf9fe9068da83e222e8b"; reference:url,publicmosaic.com/indicators; sid:9100317; rev:2;)
alert tls $HOME_NET any -> 164.90.149.44 80 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251ea40b3ccfba6921f6b2ad5881deb50aa5133aa54d343d6852ac921e5682eb"; reference:url,publicmosaic.com/indicators; sid:9103681; rev:2;)
alert tls $HOME_NET any -> 164.90.149.44 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251ea40b3ccfba6921f6b2ad5881deb50aa5133aa54d343d6852ac921e5682eb"; reference:url,publicmosaic.com/indicators; sid:9100311; rev:2;)
alert tls $HOME_NET any -> 164.90.197.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"334c532e082eea2b88804afe246c512bee1b873ad9277edc1c91841eef7542ef"; reference:url,publicmosaic.com/indicators; sid:9100313; rev:2;)
alert tls $HOME_NET any -> 164.92.136.111 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5697d7421a2d7e49a72e6dd0355f4c0fbeeebff460a55894ed83835dbabbfb21"; reference:url,publicmosaic.com/indicators; sid:9100310; rev:2;)
alert tls $HOME_NET any -> 165.154.6.188 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fe2e7943d833783a0746fd657b8f49400c06e3c5bae8c8c0699931232db8b0cb"; reference:url,publicmosaic.com/indicators; sid:9104249; rev:2;)
alert tls $HOME_NET any -> 165.227.32.223 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"282ea53dccb2016cf0c0bd7675942bbf4b20e9601852b7ecab929d1a9b67cfd8"; reference:url,publicmosaic.com/indicators; sid:9101581; rev:2;)
alert tls $HOME_NET any -> 165.227.231.125 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"010271d003e3abf7f3c813b7d4311a4df7c663740232cf71caf394f107e90833"; reference:url,publicmosaic.com/indicators; sid:9100312; rev:2;)
alert tls $HOME_NET any -> 166.0.106.156 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"67f93e9b2a3cec0bd8d01f983247fddfca5328d08f837d48810524f6944c793e"; reference:url,publicmosaic.com/indicators; sid:9106616; rev:2;)
alert tls $HOME_NET any -> 167.71.13.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ee26ee73c6e27103874a3f00efd31a7721277c728c1503513464c92342764ba0"; reference:url,publicmosaic.com/indicators; sid:9100309; rev:2;)
alert tls $HOME_NET any -> 167.71.16.171 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"be98bef1ee649c4129f4f63379fba9354c6e0064b0234ef45e9fcfc5c2563fb2"; reference:url,publicmosaic.com/indicators; sid:9100308; rev:2;)
alert tls $HOME_NET any -> 167.71.184.214 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ba914cf051841d520cdf52d5222ac58b6c6daa2ff375b3de1d8f416164017039"; reference:url,publicmosaic.com/indicators; sid:9100301; rev:2;)
alert tls $HOME_NET any -> 167.99.5.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ce0b1b6802054a3916f782eb2f1529b8115e3181872349752f06b28231f4bd6"; reference:url,publicmosaic.com/indicators; sid:9100098; rev:2;)
alert tls $HOME_NET any -> 167.99.51.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f7adc0c1f00b0a6c3476fab1c46212e34ee9ac16a3989f0f1c276a0424a6a83f"; reference:url,publicmosaic.com/indicators; sid:9100307; rev:2;)
alert tls $HOME_NET any -> 167.172.239.135 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"13c4a32f5bcb144ef91c414769726110daa3c719ba71a6f6924c8c1354e5241b"; reference:url,publicmosaic.com/indicators; sid:9100306; rev:2;)
alert tls $HOME_NET any -> 168.144.101.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d07bed6173e8bb5a3f42d8a80ac9d3e92872e7eec47ec8993d1cd7cb5b874e"; reference:url,publicmosaic.com/indicators; sid:9100431; rev:2;)
alert tls $HOME_NET any -> 169.58.198.202 8050 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47cf5d7a9ae522651aa865b0648ac2377dcc7d3236e7465ef3781678c31e8690"; reference:url,publicmosaic.com/indicators; sid:9100837; rev:2;)
alert tls $HOME_NET any -> 169.58.252.86 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d693e8b6a117c5e01b99874bca0fdf1ed1c8961943b742fd47971ea4703d2ab6"; reference:url,publicmosaic.com/indicators; sid:9103680; rev:2;)
alert tls $HOME_NET any -> 170.64.162.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5287364e4dcafdca62d2fa4c2e6a3831c17d65502c0b30e29ab81c77f3baf5a0"; reference:url,publicmosaic.com/indicators; sid:9101307; rev:2;)
alert tls $HOME_NET any -> 170.64.177.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92be9d384496c0bfad762e89d81317a658d6af4aa1817d597d4bc1a0f9b85d16"; reference:url,publicmosaic.com/indicators; sid:9100303; rev:2;)
alert tls $HOME_NET any -> 170.64.254.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92be9d384496c0bfad762e89d81317a658d6af4aa1817d597d4bc1a0f9b85d16"; reference:url,publicmosaic.com/indicators; sid:9100302; rev:2;)
alert tls $HOME_NET any -> 172.86.94.94 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e66ce7aa87bac67255609238a3b21fa3cdac2eaba23f11e8f4015ffb13d292a"; reference:url,publicmosaic.com/indicators; sid:9100305; rev:2;)
alert tls $HOME_NET any -> 172.93.187.109 4433 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cf7d21ff631aa30ede25eabbf0c3e04a542663dee5e8ae75dfb5342b2221f8c6"; reference:url,publicmosaic.com/indicators; sid:9100755; rev:2;)
alert tls $HOME_NET any -> 172.94.9.81 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ceaf1d79134524bd911555a04aa6fe155b3959209c9c3bc34a92d5365d2b0dd"; reference:url,publicmosaic.com/indicators; sid:9100095; rev:2;)
alert tls $HOME_NET any -> 172.105.103.223 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"de13703fcc480093c5a58017ddedc2895a58241dc6802805db6815058eb48a9d"; reference:url,publicmosaic.com/indicators; sid:9100304; rev:2;)
alert tls $HOME_NET any -> 172.236.10.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"50ed3450fbccc4787602e262e51518417e0d0d26445e29ec0241be004d48f197"; reference:url,publicmosaic.com/indicators; sid:9100804; rev:2;)
alert tls $HOME_NET any -> 172.236.215.250 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0f6cb6b6b931100f14e91cefbdd34bf7f04bd4c9dc417b35dab00a373647e3f9"; reference:url,publicmosaic.com/indicators; sid:9103679; rev:2;)
alert tls $HOME_NET any -> 172.245.111.207 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b5f02dce6d9a1301fa4f5daf7da76aa78de304125d7ecb7322680b8754dd707"; reference:url,publicmosaic.com/indicators; sid:9105199; rev:2;)
alert tls $HOME_NET any -> 172.245.195.202 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd356fdb670fec502951829f382aa78bec927d1547f3515060cbbbf68911e868"; reference:url,publicmosaic.com/indicators; sid:9100097; rev:2;)
alert tls $HOME_NET any -> 173.214.172.252 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"363159a3e2ccc3be082aa5a2f987ef699688dd312e7a240bd4ae882e7faefb73"; reference:url,publicmosaic.com/indicators; sid:9100803; rev:2;)
alert tls $HOME_NET any -> 173.230.129.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e6c70f30f0489162b62632b5ecabd7a9f01ed3e9d2762925f2382202bc5cd8a"; reference:url,publicmosaic.com/indicators; sid:9103836; rev:2;)
alert tls $HOME_NET any -> 173.249.205.43 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"86ccc8dd3fb308f0c41fa5fe8af962a5f5a9f35d977e7a712ec944dce1cc2d86"; reference:url,publicmosaic.com/indicators; sid:9105990; rev:2;)
alert tls $HOME_NET any -> 176.122.166.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3faeece7945a69ccac539446c4549452477a014d9ae7cdc589cafbeae3eda4ca"; reference:url,publicmosaic.com/indicators; sid:9103640; rev:2;)
alert tls $HOME_NET any -> 177.124.72.24 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"acc9fed5ee946bb455dd0a54096a90ab62d91f3dfcecf9e261ee50d18551783a"; reference:url,publicmosaic.com/indicators; sid:9100300; rev:2;)
alert tls $HOME_NET any -> 177.130.81.72 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5405aba406df160cdabc20f97eb320511b201d09ce5ad94c9cdaa22c4db6c389"; reference:url,publicmosaic.com/indicators; sid:9103678; rev:2;)
alert tls $HOME_NET any -> 178.128.21.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b5eb6af96497bd333a02922a8b5afde55029aef5ead7edb672b14678c58452fc"; reference:url,publicmosaic.com/indicators; sid:9100299; rev:2;)
alert tls $HOME_NET any -> 178.128.63.20 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f4707cc1a8dbdd5ace10eb65cee3642540f1a27e7322b30f1749753bed4624da"; reference:url,publicmosaic.com/indicators; sid:9100298; rev:2;)
alert tls $HOME_NET any -> 178.128.140.47 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"334c532e082eea2b88804afe246c512bee1b873ad9277edc1c91841eef7542ef"; reference:url,publicmosaic.com/indicators; sid:9100746; rev:2;)
alert tls $HOME_NET any -> 178.128.222.137 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"36ca57038359b888ea99744016d157a526f6944b202a645c134ac152f5d3783b"; reference:url,publicmosaic.com/indicators; sid:9100430; rev:2;)
alert tls $HOME_NET any -> 178.128.244.152 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"87a2f2ded1bc4f84ffc5607423f1dac6cec01c77cac87f6cf72c8c1b44fd5258"; reference:url,publicmosaic.com/indicators; sid:9100296; rev:2;)
alert tls $HOME_NET any -> 179.199.198.208 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"683975f5cdf26c2484a4dfd3024b6aec0e0aee7408d7b2900fe407f04faecf82"; reference:url,publicmosaic.com/indicators; sid:9105989; rev:2;)
alert tls $HOME_NET any -> 180.94.20.228 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ff8d00618c59d08250d6940309fffb235bc7c41b3a9723cd2e6687450cc2c65a"; reference:url,publicmosaic.com/indicators; sid:9105988; rev:2;)
alert tls $HOME_NET any -> 182.255.44.231 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"324e3cd776ec2f2286929f663288a2b18000ef5e3822bc59738a6459366e9ae4"; reference:url,publicmosaic.com/indicators; sid:9100092; rev:2;)
alert tls $HOME_NET any -> 182.255.45.50 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"86a11eda8a8b64d49871919f028f3c416a8c092e00cdee0610fbdcf3106483fd"; reference:url,publicmosaic.com/indicators; sid:9100297; rev:2;)
alert tls $HOME_NET any -> 182.255.91.104 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"32b7ac340f60b00977b90ce07dc08bf8d7488955eb3f6e81c8018fbd36b811d6"; reference:url,publicmosaic.com/indicators; sid:9100166; rev:2;)
alert tls $HOME_NET any -> 185.43.5.225 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"679e8be32306fca92a1148e3de87418b8e46d94fc50abe598c72630de5ff8024"; reference:url,publicmosaic.com/indicators; sid:9100087; rev:2;)
alert tls $HOME_NET any -> 185.130.46.90 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4f631ccf13c188ede86c3b50b6d27a5f54c870646be93091a97ada7ac6133ffd"; reference:url,publicmosaic.com/indicators; sid:9104248; rev:2;)
alert tls $HOME_NET any -> 185.141.60.111 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"85c61990b65fb7b31d6c5c5c17041ed103634fae3280263820432b38b94033a3"; reference:url,publicmosaic.com/indicators; sid:9100295; rev:2;)
alert tls $HOME_NET any -> 185.158.112.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47d2723d9c2dbb332897a4e76a17b5fa1ff3472283077d1690c6cd4392fa055a"; reference:url,publicmosaic.com/indicators; sid:9100836; rev:2;)
alert tls $HOME_NET any -> 185.185.68.42 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5a0678eae2e4156adbc61ade32f96fcd421f383e9139739fdf9d8bb7c91c6c62"; reference:url,publicmosaic.com/indicators; sid:9100819; rev:2;)
alert tls $HOME_NET any -> 185.233.166.158 35333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1d3c90b39ef2b75297a3cc3bcf927b2a5a343af6de88fcf847a12aff67dbfd89"; reference:url,publicmosaic.com/indicators; sid:9100835; rev:2;)
alert tls $HOME_NET any -> 185.242.235.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e82badef755fb964e5e5d264a69f221a005f623bc3c5d19cbf9d5b88f5a6dd9"; reference:url,publicmosaic.com/indicators; sid:9101637; rev:2;)
alert tls $HOME_NET any -> 185.246.220.204 55448 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bb3b42a0fe166f5e7bc5c095a491483d97905633999569d3b78ea63a46bcf734"; reference:url,publicmosaic.com/indicators; sid:9100090; rev:2;)
alert tls $HOME_NET any -> 185.251.91.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5a0678eae2e4156adbc61ade32f96fcd421f383e9139739fdf9d8bb7c91c6c62"; reference:url,publicmosaic.com/indicators; sid:9100817; rev:2;)
alert tls $HOME_NET any -> 187.145.56.252 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9101306; rev:2;)
alert tls $HOME_NET any -> 187.145.125.245 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9106615; rev:2;)
alert tls $HOME_NET any -> 188.42.217.40 64323 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8bb55f94dac6cc1dac6a653f523f1aac578059107397c446be01555376a69cf6"; reference:url,publicmosaic.com/indicators; sid:9100834; rev:2;)
alert tls $HOME_NET any -> 189.249.193.210 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9100802; rev:2;)
alert tls $HOME_NET any -> 192.110.167.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9b87408aa05dd93bd344cf58b0f963965d9efbbad757c36fdfac36ccc635186d"; reference:url,publicmosaic.com/indicators; sid:9105986; rev:2;)
alert tls $HOME_NET any -> 192.110.167.181 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9b87408aa05dd93bd344cf58b0f963965d9efbbad757c36fdfac36ccc635186d"; reference:url,publicmosaic.com/indicators; sid:9100294; rev:2;)
alert tls $HOME_NET any -> 192.155.92.211 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad783a4be2aeff11eee8e8ec00fdc5cc8bd183cde940e9b039e006783ac6ef6a"; reference:url,publicmosaic.com/indicators; sid:9106818; rev:2;)
alert tls $HOME_NET any -> 192.169.176.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9100293; rev:2;)
alert tls $HOME_NET any -> 193.149.129.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d82315b2874f9b9c0cba73702e250c7da7b646178deb5739e14334e9a7eac2d8"; reference:url,publicmosaic.com/indicators; sid:9105985; rev:2;)
alert tls $HOME_NET any -> 194.26.192.69 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d8be3571c06dbf79aa21628862b83b9bb84984866f1b4c02a2fd435a19e66b4e"; reference:url,publicmosaic.com/indicators; sid:9103677; rev:2;)
alert tls $HOME_NET any -> 195.200.28.173 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"aa6b615753567078e0b063c675b14dbe33af5d6e26c24bd222ec699f5353c866"; reference:url,publicmosaic.com/indicators; sid:9100724; rev:2;)
alert tls $HOME_NET any -> 196.188.116.63 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5c3aeb467550851e897d4483799582b1a4ba75eb7b57bbcd72b891994fa5242e"; reference:url,publicmosaic.com/indicators; sid:9100077; rev:2;)
alert tls $HOME_NET any -> 198.251.91.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f971c123faa94a5cfebe71b6d3b8be455b802fbe7d6d90b0c5e8f5fe7f1092b0"; reference:url,publicmosaic.com/indicators; sid:9106743; rev:2;)
alert tls $HOME_NET any -> 199.245.176.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b442d6c3299157e0fe1411e7a4f6e42b7bcb4e48bd398f5b2caa3664171d7ae2"; reference:url,publicmosaic.com/indicators; sid:9100292; rev:2;)
alert tls $HOME_NET any -> 203.24.92.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c7d5c175c5f0a7721c71a01a5f02fd4a3ab00bdbe15902619bf5970454e17116"; reference:url,publicmosaic.com/indicators; sid:9101752; rev:2;)
alert tls $HOME_NET any -> 203.88.118.192 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3570cd2f1ff54c63ee10849a65ffa1e8a339da12a7a8f622f5330a0986fe9dc4"; reference:url,publicmosaic.com/indicators; sid:9101949; rev:2;)
alert tls $HOME_NET any -> 203.159.90.24 59407 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3f18b700ab8b538317aea3d00f7675110be23e9a32ae58e80824040289680159"; reference:url,publicmosaic.com/indicators; sid:9100833; rev:2;)
alert tls $HOME_NET any -> 203.159.90.207 59405 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a50f19d4720ce861b968c92ae6a08bd4c372b60d0d6047d414d2c156a259cdcc"; reference:url,publicmosaic.com/indicators; sid:9100071; rev:2;)
alert tls $HOME_NET any -> 204.12.245.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251019543e0b670e960dce9474ee1484a087b8d67104ff0e46c6d6d09a744c42"; reference:url,publicmosaic.com/indicators; sid:9100070; rev:2;)
alert tls $HOME_NET any -> 204.152.220.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8eb2f358a6be5bc06e80774468287efbcd5cac74220b30fda5936614ba8f482f"; reference:url,publicmosaic.com/indicators; sid:9100291; rev:2;)
alert tls $HOME_NET any -> 204.168.238.208 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6e8372edb03c6e59308b371b61c8b773af1296a601ea7ce7caa83d5114488db2"; reference:url,publicmosaic.com/indicators; sid:9103676; rev:2;)
alert tls $HOME_NET any -> 204.194.54.61 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9958f8992a757cd5e7cdc369e5232841d847bd2d4985afb344386a3a50fc9c4e"; reference:url,publicmosaic.com/indicators; sid:9100289; rev:2;)
alert tls $HOME_NET any -> 206.245.132.230 35333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05ebeb0d56e11c1c627f64731a7c11d1aa939139a86ad457ca9421c44c3145bf"; reference:url,publicmosaic.com/indicators; sid:9100069; rev:2;)
alert tls $HOME_NET any -> 207.57.135.209 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b7e354f08985ad0d4d993e8c45182e3d22167f4620bc5d5501f7cc6248ca7fc7"; reference:url,publicmosaic.com/indicators; sid:9100290; rev:2;)
alert tls $HOME_NET any -> 209.74.72.248 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1fe37bbe73e6bc92e827c9e8639a108d6a731e0abff65390247ede9cf6e81b8"; reference:url,publicmosaic.com/indicators; sid:9103895; rev:2;)
alert tls $HOME_NET any -> 209.99.184.231 63523 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"16b1e4fc30b9072f4802522f1462de1c4d4e8b9e53fa3d47fd372560f50503cc"; reference:url,publicmosaic.com/indicators; sid:9106742; rev:2;)
alert tls $HOME_NET any -> 209.99.191.164 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d99be3bb0591e71e7c2f217a42ef14aefba609f3aec602587862ba961d82574d"; reference:url,publicmosaic.com/indicators; sid:9100815; rev:2;)
alert tls $HOME_NET any -> 209.126.1.46 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b8b71b98cba0fcea06f8b50e0644d9ad5dc000cc2951f8538308a316eb4f5032"; reference:url,publicmosaic.com/indicators; sid:9103985; rev:2;)
alert tls $HOME_NET any -> 212.60.151.85 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e9ccd040f09dea9e7ce69d3cf5bb1adf63e2fffeed22c7caaaf02bafccc0069f"; reference:url,publicmosaic.com/indicators; sid:9100288; rev:2;)
alert tls $HOME_NET any -> 212.192.15.13 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"49dcbaaab977c4e9ec7bb9597dc6fe46d589739fe622d8a79620902039201bd7"; reference:url,publicmosaic.com/indicators; sid:9100814; rev:2;)
alert tls $HOME_NET any -> 213.145.86.232 31866 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ba9f1846cd3d85dcd05e717f7ed374247e5c6622987047b1e61bffdd85575d71"; reference:url,publicmosaic.com/indicators; sid:9100832; rev:2;)
alert tls $HOME_NET any -> 213.218.160.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"30c576c2c0b4c5f9ea88af96274f91781d8c122bcf91c829f7a1fe99406117c5"; reference:url,publicmosaic.com/indicators; sid:9105984; rev:2;)