157.230.248.213
C2 Infrastructure CobaltStrike Indicator 157.230.248.213 Type ip Category C2 Infrastructure Family CobaltStrike Hosting DigitalOcean Confidence high VT Score 8/94 Source shodan First Seen 2026-07-01 00:00:55 UTC Last Seen 2026-07-29 16:00:45 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 2649159893,
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"headers_hash": 2129120964,
"host": "157.230.248.213",
"html": "",
"server_hash": null,
"location": "/",
"components": {},
"securitytxt_hash": null,
"server": null,
"sitemap": null,
"html_hash": 0
},
"port": 443,
"transport": "tcp",
"cloud": {
"region": "sg-05",
"service": null,
"provider": "DigitalOcean"
},
"location": {
"city": "Singapore",
"region_code": "01",
"area_code": null,
"longitude": 103.6957,
"latitude": 1.3215,
"country_code": "SG",
"country_name": "Singapore"
},
"product": "Cobalt Strike Beacon",
"hash": -2075873341,
"tags": [
"cloud",
"self-signed"
],
"timestamp": "2026-06-29T07:02:18.435499",
"ssl": {
"chain_sha256": [
"273de7230d110a05201fd92f13f488cfcc71710834bf993835f5326e902a5cb2"
],
"jarm": "2ad2ad16d2ad2ad00042d42d00042ddb04deffa1705e2edc44cae1ed24a4da",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 10,
"name": "supported_groups"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nAjuCFqpbg0xVsWqwbSp1oN8=\n-----END CERTIFICATE-----\n"
],
"versions": [
"-TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha256WithRSAEncryption",
"issued": "20260608040206Z",
"expires": "20270608040206Z",
"pubkey": {
"bits": 2048,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"data": "\\x04\\x14\\x8b\\xeb\\xd5\\xe1\\xac\\x19\\xab&5\\x01U\\xa7&\\xa7\\xd1\\x94\\x1ag\\x0c\\x87",
"name": "subjectKeyIdentifier"
}
],
"fingerprint": {
"sha256": "273de7230d110a05201fd92f13f488cfcc71710834bf993835f5326e902a5cb2",
"sha1": "25c93106df7b5fcc5ecf9add3a8e8149fb057450"
},
"serial": 849340548,
"issuer": {
"C": "US",
"CN": "safebrowsingultimate.com",
"L": "San Francisco",
"O": "",
"ST": "CA",
"OU": "Local Foundation Inc"
},
"expired": false,
"subject": {
"C": "US",
"CN": "safebrowsingultimate.com",
"L": "San Francisco",
"O": "",
"ST": "CA",
"OU": "Local Foundation Inc"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "f03a69cfa3944d6d51bc52febd87a1a8",
"ocsp": {}
},
"hostnames": [],
"org": "DigitalOcean, LLC",
"data": "HTTP/1.1 404 Not Found\r\nDate: Mon, 29 Jun 2026 07:02:18 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
"asn": "AS14061",
"cpe23": [
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"isp": "DigitalOcean, LLC",
"cpe": [
"cpe:/a:helpsystems:cobalt_strike"
],
"domains": [],
"ip_str": "157.230.248.213",
"os": null,
"_shodan": {
"region": "na",
"module": "https",
"ptr": true,
"options": {},
"id": "3bee925b-8cd5-4c9d-abc7-f232b8bd8af4",
"crawler": "60ed417ad95fef3bf25c236f9558911d765bbdab"
}
}