52.202.75.213
C2 Infrastructure CobaltStrike Indicator 52.202.75.213 Type ip Category C2 Infrastructure Family CobaltStrike Hosting AWS Confidence high VT Score 6/94 Source shodan First Seen 2026-08-13 16:00:27 UTC Last Seen 2026-08-28 00:00:24 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 885672917,
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"components_hash": 0,
"headers_hash": 2129120964,
"host": "52.202.75.213",
"html": "",
"server_hash": null,
"location": "/",
"components": {},
"securitytxt_hash": null,
"headers": {
"date": "Mon, 10 Aug 2026 18:35:22 GMT",
"content-length": "0",
"content-type": "text/plain"
},
"server": null,
"sitemap": null,
"html_hash": 0
},
"port": 8443,
"transport": "tcp",
"cpe23_hash": -527748401,
"cloud": {
"region": "us-east-1",
"service": "EC2",
"provider": "Amazon"
},
"location": {
"city": "Ashburn",
"region_code": "VA",
"area_code": null,
"longitude": -77.48749,
"latitude": 39.04372,
"country_code": "US",
"country_name": "United States"
},
"product": "Cobalt Strike Beacon",
"hash": -200227701,
"tags": [
"cloud"
],
"timestamp": "2026-08-10T18:35:22.398354",
"ssl": {
"chain_sha256": [
"9450156b0853870a9fe4063097a550f4ae259a79ab2225eeda9ba82f6a0421f2",
"238b85a0099c65b970477d5724f1a1d475ce5058cffe4efa8733899bdb863c47",
"072639d0b140d5bffae16ad9c3f6cc6086040621f51ee61a6d46a8915c07cf76"
],
"jarm": "2ad2ad16d2ad2ad00042d42d00042ddb04deffa1705e2edc44cae1ed24a4da",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 10,
"name": "supported_groups"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nmyc94vJF\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nyDFx8r7i9vIJU5HS3moZLkYWAOilMaV9N56A9Bgb6dNcHkvg3NoaYA==\n-----END CERTIFICATE-----\n"
],
"versions": [],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha256WithRSAEncryption",
"issued": "20260707104007Z",
"expires": "20261005104006Z",
"pubkey": {
"bits": 2048,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"critical": true,
"data": "\\x03\\x02\\x05\\xa0",
"name": "keyUsage"
},
{
"data": "0\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01",
"name": "extendedKeyUsage"
},
{
"critical": true,
"data": "0\\x00",
"name": "basicConstraints"
},
{
"data": "\\x04\\x14*\\x87\\xe2\\x19\\xe0TM\\x8b\\xaa\\x95:\\xd9\\x0e&\\xa0\\xc5\\x96L\\xee\\xbe",
"name": "subjectKeyIdentifier"
},
{
"data": "0\\x16\\x80\\x14@\\x15-&y\\xed2 \\x9e\\xdf\\x9ar\\x1d\\xd62\\x1f\\x81\\x0c\\x81\\x0c",
"name": "authorityKeyIdentifier"
},
{
"data": "0%0#\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x17http://yr2.i.lencr.org/",
"name": "authorityInfoAccess"
},
{
"data": "0(\\x82\\x13*.city-feedback.net\\x82\\x11city-feedback.net",
"name": "subjectAltName"
},
{
"data": "0\\n0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
"name": "certificatePolicies"
},
{
"data": "0%0#\\xa0!\\xa0\\x1f\\x86\\x1dhttp://yr2.c.lencr.org/37.crl",
"name": "crlDistributionPoints"
},
{
"data": "\\x04\\x81\\xfb\\x00\\xf9\\x00w\\x00\\x94NC\\x87\\xfa\\xec\\xc1\\xef\\x81\\xf3\\x19$&\\xa8\\x18e\\x01\\xc7\\xd3_8\\x02\\x01?rg}U7.\\x19\\xd8\\x00\\x00\\x01\\x9f<_v\\xf1\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\xe8\\xad\\xe2\\x03j\\xb2\\x85g\\xe7Hfy\\x8ag\\xa5S<\\xe2\\x19\\x82c\\xbd\\x84A+\\xbfO\\x80s$[.\\x02!\\x00\\xbd\\xdd7\\x04\\xbcS\\xa1?\\x1e.](w\\x99Z\\xb2\\xf4\\xcc\\xc1\\xc71\\x06\\x04x\\x99\\x1b\\xaf!`\\xea\\xeb\\x06\\x00~\\x00&\\xe3dnXi!#\\xbc4?G$5\\x9b7\\x92\\xcd$Z\\x88\\xd8\\x15\\xd3\\x933\\xfd\\x99\\x18\\xabG#\\x00\\x00\\x01\\x9f<_t\\xc9\\x00\\x08\\x00\\x00\\x05\\x00&sr\\xdc\\x04\\x03\\x00G0E\\x02!\\x00\\x8c\\t\\xa7#\\x13\\xee(\\xcd\\xa4\\xce\\x90Q?\\x12\\xac\\x89X4\\xec\\x83\"\\t\\xf7g\\xee\\xd8\\x9f@\\xa0Y\\xb3\\xcb\\x02 Q\\xe7c\\x1e\\x00C\\xf6\\x7f\\xa4a-\\xee\\xd8B7u 9\\x00\\x97\\x93m\\x1aK\\xee?\\x8ap6p#\\xb5",
"name": "ct_precert_scts"
}
],
"fingerprint": {
"sha256": "9450156b0853870a9fe4063097a550f4ae259a79ab2225eeda9ba82f6a0421f2",
"sha1": "320afb716b578208820a1fe4e8773a97b921011f"
},
"serial": 4.6406308645821115e+41,
"issuer": {
"C": "US",
"CN": "YR2",
"O": "Let's Encrypt"
},
"expired": false,
"subject": {
"CN": "city-feedback.net"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "f03a69cfa3944d6d51bc52febd87a1a8",
"ocsp": {}
},
"hostnames": [
"city-feedback.net"
],
"org": "Amazon Technologies Inc.",
"data": "HTTP/1.1 404 Not Found\r\nDate: Mon, 10 Aug 2026 18:35:22 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
"asn": "AS14618",
"cpe23": [
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"isp": "Amazon.com, Inc.",
"cpe": [
"cpe:/a:helpsystems:cobalt_strike"
],
"domains": [
"city-feedback.net"
],
"ip_str": "52.202.75.213",
"os": null,
"_shodan": {
"region": "",
"module": "https",
"ptr": true,
"options": {},
"id": "8d34981b-e10c-47f5-b30d-3853d3ee57f0",
"crawler": "91597136eb9b132d7cc954511e0d9cbe7ce2e377"
}
}