40.67.146.12
C2 Infrastructure CobaltStrike Indicator 40.67.146.12 Type ip Category C2 Infrastructure Family CobaltStrike Hosting Azure Confidence high VT Score 6/94 Source shodan First Seen 2026-04-25 08:00:05 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 675516940,
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"headers_hash": -505627267,
"host": "40.67.146.12",
"html": "",
"server_hash": -1604084462,
"location": "/",
"components": {
"Apache HTTP Server": {
"categories": [
"Web servers"
],
"versions": [
"2.2.36"
]
}
},
"securitytxt_hash": null,
"server": "Apache/2.2.36 (custom) mod_antiloris/0.4",
"sitemap": null,
"html_hash": 0
},
"port": 443,
"transport": "tcp",
"cloud": {
"region": "eastus2",
"service": "AzureCloud",
"provider": "Azure"
},
"location": {
"city": "Boydton",
"region_code": "VA",
"area_code": null,
"longitude": -78.3875,
"latitude": 36.66764,
"country_code": "US",
"country_name": "United States"
},
"product": "Cobalt Strike Beacon",
"hash": 1899074311,
"tags": [
"cloud"
],
"timestamp": "2026-04-24T22:38:23.844618",
"ssl": {
"chain_sha256": [
"206a64c0ac01d02eb8750d72f88f009339dbc550209060cf1bf5e7f4087c3078",
"aeb1fd7410e83bc96f5da3c6a7c2c1bb836d1fa5cb86e708515890e428a8770b"
],
"jarm": "28d28d28d00028d00042d42d00042de0d120da90d5910c5de2af43b74a6bd8",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 10,
"name": "supported_groups"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nK0GH18venH6C41JAamzobsFLrZv7kSj8zVmZTqWBiMc746bneQ==\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n+VUwFj9tmWxyR/M=\n-----END CERTIFICATE-----\n"
],
"versions": [
"-TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "ecdsa-with-SHA384",
"issued": "20260311181830Z",
"expires": "20260609181829Z",
"pubkey": {
"bits": 256,
"type": "dsa"
},
"version": 2,
"extensions": [
{
"critical": true,
"data": "\\x03\\x02\\x07\\x80",
"name": "keyUsage"
},
{
"data": "0\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01",
"name": "extendedKeyUsage"
},
{
"critical": true,
"data": "0\\x00",
"name": "basicConstraints"
},
{
"data": "\\x04\\x14\\x94\\xb13\\xd0 \\xec\\xc8\\xa1\\xfa\\x1d\\x06}\\x9f\\x85\\xcaz\\xd0\\x99#\\xbc",
"name": "subjectKeyIdentifier"
},
{
"data": "0\\x16\\x80\\x14\\xaeH\\x9e\\xdc\\x87\\x1dD\\xa0o\\xda\\xa2\\xe5`t\\x04x\\xc2\\x9c\\x00\\x80",
"name": "authorityKeyIdentifier"
},
{
"data": "0$0\"\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x16http://e7.i.lencr.org/",
"name": "authorityInfoAccess"
},
{
"data": "0\\r\\x82\\x0bch2tech.com",
"name": "subjectAltName"
},
{
"data": "0\\n0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
"name": "certificatePolicies"
},
{
"data": "0$0\"\\xa0 \\xa0\\x1e\\x86\\x1chttp://e7.c.lencr.org/17.crl",
"name": "crlDistributionPoints"
},
{
"data": "\\x04\\x81\\xfa\\x00\\xf8\\x00w\\x00d\\x11\\xc4l\\xa4\\x12\\xec\\xa7\\x89\\x1c\\xa2\\x02.\\x00\\xbc\\xabO(\\x07\\xd4\\x1e5\\'\\xab\\xea\\xfe\\xd5\\x03\\xc9}\\xcd\\xf0\\x00\\x00\\x01\\x9c\\xdeT\\xba\\x9d\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\xe6>\\xb7\\xd0\\xcdv\\\\p(\\xeb\\to\\xa3\\' ~\\xab\\xaf\\xc2\\x8a\\x1d\\xe3O\\xc8t\\x1fO\\x90\\x8e\\t\\x80\\xc3\\x02!\\x00\\xac-G\\x0f\\xa6\\xd1\\xe5\\xa0\\x06\\xed\\x16>\\xb7MV\\x9e\\xd7nEV\\x18\\xad\\xdb\\t\\xe4\\x05;\\xca^\\x86\\xf9\\xb3\\x00}\\x00q~\\x95\\xf3\\xc28\\x8am\\xb1\\xe3\\x84I=1\\xe1Z\\xa9b\\x08v-B\\x00\\xe0\\x05\\x0c\\xd0g\\xb5\\xa6a\\xe2\\x00\\x00\\x01\\x9c\\xdeT\\xbb\\x08\\x00\\x08\\x00\\x00\\x05\\x00\\x0bqs\\x14\\x04\\x03\\x00F0D\\x02 s}\\xab\\rG%r6O\\xa0\\xd9f6\\xcdR\\xba\\xa1\\x97\\x0bJ\\xf0\\xf1&\\xa5)\\xfaS_]\\x10H\\xbe\\x02 \"Q\\x83sh\\xc2x\\x91\\xc5y\"\\n\\x00\\xc6\\xed\\x14\\xb7\\x04\\xed\\x7f\\xc7\\xbc\\x89\\xb2\\x84\\xe6\\\\\\xdf\\xdf[TM",
"name": "ct_precert_scts"
}
],
"fingerprint": {
"sha256": "206a64c0ac01d02eb8750d72f88f009339dbc550209060cf1bf5e7f4087c3078",
"sha1": "523f930febcc086dbdd0ec27b37cf9dd201d468e"
},
"serial": 5.6661480910367836e+41,
"issuer": {
"C": "US",
"CN": "E7",
"O": "Let's Encrypt"
},
"expired": false,
"subject": {
"CN": "ch2tech.com"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "f03a69cfa3944d6d51bc52febd87a1a8",
"ocsp": {}
},
"hostnames": [
"ch2tech.com"
],
"org": "Microsoft Corporation",
"data": "HTTP/1.1 404 Not Found\r\nDate: Fri, 24 Apr 2026 22:38:23 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nServer: Apache/2.2.36 (custom) mod_antiloris/0.4\r\nAccess-Control-Allow-Headers: X-PINGOTHER\r\nX-Content-Security-Policy: default-src 'self'\r\nX-Content-Type-Options: nosniff\r\nX-UA-Compatible: Chrome=1\r\nProxy-Connection: Keep-Alive\r\nContent-Security-Policy-Report-Only: default-src 'self'; report-uri /csp_report_parser;\r\nETag: E3A4\r\n\r\n",
"asn": "AS8075",
"cpe23": [
"cpe:2.3:a:apache:http_server:2.2.36",
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"isp": "Microsoft Corporation",
"cpe": [
"cpe:/a:apache:http_server:2.2.36",
"cpe:/a:helpsystems:cobalt_strike"
],
"domains": [
"ch2tech.com"
],
"ip_str": "40.67.146.12",
"os": null,
"_shodan": {
"region": "na",
"module": "https",
"ptr": true,
"options": {},
"id": "0ff2cb79-5280-4236-b993-5d786b28b891",
"crawler": "cfbaa5b5e4d3c00a43d8a4267250eab20b84c635"
}
}