212.43.144.82
C2 Infrastructure CobaltStrike Indicator 212.43.144.82 Type ip Category C2 Infrastructure Family CobaltStrike Hosting Podaon SIA Confidence high VT Score 5/94 Source shodan First Seen 2026-10-02 16:00:33 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 3559624786,
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"components_hash": 1840820445,
"headers_hash": -1692967738,
"host": "212.43.144.82",
"html": "",
"server_hash": -1340961475,
"location": "/",
"components": {
"Nginx": {
"categories": [
"Web servers",
"Reverse proxies"
]
}
},
"securitytxt_hash": null,
"headers": {
"date": "Thu, 01 Oct 2026 23:31:53 GMT",
"content-length": "0",
"content-type": "text/plain",
"connection": "keep-alive",
"server": "nginx"
},
"server": "nginx",
"sitemap": null,
"html_hash": 0
},
"port": 443,
"transport": "tcp",
"cpe23_hash": 876207692,
"location": {
"city": "Carouge",
"region_code": "GE",
"area_code": null,
"longitude": 6.13921,
"latitude": 46.18096,
"country_code": "CH",
"country_name": "Switzerland"
},
"product": "Cobalt Strike Beacon",
"hash": 343691085,
"timestamp": "2026-10-01T23:31:53.181066",
"ssl": {
"chain_sha256": [
"82e8ae2a7cd06760077655ebbde66216cb034da65de81c864deb280c993f271a",
"97658de8c68dfa98ace1e5028a63d54a1aae911b3e21471076c6850cd08cbab4",
"0fc0901cca2bae9e9fdbb02d50d02f1094f7b36672086991b9e897626dc485f0",
"ee5f7abd6981bb0255632cd8f49283451b4b18844d12040b44ee00f07b8fe2c6"
],
"jarm": "28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 0,
"name": "server_name"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----\nMIIDpTCCAyugAwIBAgISBjBQ0+/flWAbM9pv3h4kDgEVMAoGCCqGSM49BAMDMDMx\nCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZ\nRTIwHhcNMjYwOTI0MTU1MzA4WhcNMjYxMjIzMTU1MzA3WjAmMSQwIgYDVQQDExtt\nZXRyaWNzLm1hdGhlbWF0aWNzLmNvbGxlZ2UwWTATBgcqhkjOPQIBBggqhkjOPQMB\nBwNCAASKdke4X2/PqzdHEX9pWbE5v1f7LXJj4Uki4lpubXXpdeI9X0mqdh8jGdxN\n819GAQHfyhNvWXwnTcm4A44XsULRo4ICKjCCAiYwDgYDVR0PAQH/BAQDAgeAMBMG\nA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFODr5C5H\n+oEoDhCG3XV6T4x8rWObMB8GA1UdIwQYMBaAFLlZ8o7PIvCG0zdI/3YUGLqC2FWH\nMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3llMi5pLmxlbmNy\nLm9yZy8wJgYDVR0RBB8wHYIbbWV0cmljcy5tYXRoZW1hdGljcy5jb2xsZWdlMBMG\nA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly95ZTIu\nYy5sZW5jci5vcmcvMjIuY3JsMIIBDQYKKwYBBAHWeQIEAgSB/gSB+wD5AHYAwjF+\nV0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGg1FRvVgAABAMARzBFAiEA\nte8Ah/PU6DTzfw6xExsokvY0AO6U8E0HZ1Ttha06UD4CIG6buzv2vyNtlfuVxAVg\nmpf4NVc1mD5pBVQCKD3aoJN7AH8AJuNkblhpISO8ND9HJDWbN5LNJFqI2BXTkzP9\nmRirRyMAAAGg1FRl0AAIAAAFAEX6yAUEAwBIMEYCIQD4E/9uHveB89s7v5c522g5\n1Ij6BUigxGAnRsyn9QFowAIhAO5EdBTZYGNNcvNZZM9r0xs5omG3d4hlNDig91gW\napexMAoGCCqGSM49BAMDA2gAMGUCMQDo7QWV9/PdH0uNBZVAHzxCp03psWzcqXcM\nZRnaa6/0PnOpJG+Y3T81nrGkZcmIFjICMFrwjpM42QD2lK3m3gPdzoGKhtmCd0Db\nqYWFUSludDnq/iZaLfCP88ceFMbUM7LiyA==\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nDKrIb2EKk5NpOpE6/XttQYZV/3gilB9l+Cc/DOVwmyg=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n6hSW1/IWaas6dg==\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nTT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R\n-----END CERTIFICATE-----\n"
],
"versions": [
"-TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "ecdsa-with-SHA384",
"issued": "20260924155308Z",
"expires": "20261223155307Z",
"pubkey": {
"bits": 256,
"type": "dsa"
},
"version": 2,
"extensions": [
{
"critical": true,
"data": "\\x03\\x02\\x07\\x80",
"name": "keyUsage"
},
{
"data": "0\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01",
"name": "extendedKeyUsage"
},
{
"critical": true,
"data": "0\\x00",
"name": "basicConstraints"
},
{
"data": "\\x04\\x14\\xe0\\xeb\\xe4.G\\xfa\\x81(\\x0e\\x10\\x86\\xdduzO\\x8c|\\xadc\\x9b",
"name": "subjectKeyIdentifier"
},
{
"data": "0\\x16\\x80\\x14\\xb9Y\\xf2\\x8e\\xcf\"\\xf0\\x86\\xd37H\\xffv\\x14\\x18\\xba\\x82\\xd8U\\x87",
"name": "authorityKeyIdentifier"
},
{
"data": "0%0#\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x17http://ye2.i.lencr.org/",
"name": "authorityInfoAccess"
},
{
"data": "0\\x1d\\x82\\x1bmetrics.mathematics.college",
"name": "subjectAltName"
},
{
"data": "0\\n0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
"name": "certificatePolicies"
},
{
"data": "0%0#\\xa0!\\xa0\\x1f\\x86\\x1dhttp://ye2.c.lencr.org/22.crl",
"name": "crlDistributionPoints"
},
{
"data": "\\x04\\x81\\xfb\\x00\\xf9\\x00v\\x00\\xc21~WE\\x19\\xa3E\\xee\\x7f8\\xde\\xb2\\x90A\\xeb\\xc7\\xc2!Z\"\\xbf\\x7f\\xd5\\xb5\\xadv\\x9a\\xd9\\x0eR\\xcd\\x00\\x00\\x01\\xa0\\xd4ToV\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\xb5\\xef\\x00\\x87\\xf3\\xd4\\xe84\\xf3\\x7f\\x0e\\xb1\\x13\\x1b(\\x92\\xf64\\x00\\xee\\x94\\xf0M\\x07gT\\xed\\x85\\xad:P>\\x02 n\\x9b\\xbb;\\xf6\\xbf#m\\x95\\xfb\\x95\\xc4\\x05`\\x9a\\x97\\xf85W5\\x98>i\\x05T\\x02(=\\xda\\xa0\\x93{\\x00\\x7f\\x00&\\xe3dnXi!#\\xbc4?G$5\\x9b7\\x92\\xcd$Z\\x88\\xd8\\x15\\xd3\\x933\\xfd\\x99\\x18\\xabG#\\x00\\x00\\x01\\xa0\\xd4Te\\xd0\\x00\\x08\\x00\\x00\\x05\\x00E\\xfa\\xc8\\x05\\x04\\x03\\x00H0F\\x02!\\x00\\xf8\\x13\\xffn\\x1e\\xf7\\x81\\xf3\\xdb;\\xbf\\x979\\xdbh9\\xd4\\x88\\xfa\\x05H\\xa0\\xc4`\\'F\\xcc\\xa7\\xf5\\x01h\\xc0\\x02!\\x00\\xeeDt\\x14\\xd9`cMr\\xf3Yd\\xcfk\\xd3\\x1b9\\xa2a\\xb7w\\x88e48\\xa0\\xf7X\\x16j\\x97\\xb1",
"name": "ct_precert_scts"
}
],
"fingerprint": {
"sha256": "82e8ae2a7cd06760077655ebbde66216cb034da65de81c864deb280c993f271a",
"sha1": "9a11092251731198c027cd60b961d9ba80b721ef"
},
"serial": 5.391147078822765e+41,
"issuer": {
"C": "US",
"CN": "YE2",
"O": "Let's Encrypt"
},
"expired": false,
"subject": {
"CN": "metrics.mathematics.college"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "574866101f64002c6421cc329e4d5458",
"ocsp": {}
},
"hostnames": [
"212-43-144-82.germany-1.vps.ac",
"metrics.mathematics.college"
],
"org": "Podaon SIA",
"data": "HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Thu, 01 Oct 2026 23:31:53 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n",
"asn": "AS211381",
"cpe23": [
"cpe:2.3:a:f5:nginx",
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"isp": "Podaon SIA",
"cpe": [
"cpe:/a:f5:nginx",
"cpe:/a:helpsystems:cobalt_strike"
],
"domains": [
"vps.ac",
"mathematics.college"
],
"ip_str": "212.43.144.82",
"os": null,
"_shodan": {
"region": "na",
"crawler": "cca83004a1b8c6c55b7d66cf3c38108b16492dbe",
"options": {},
"module": "https",
"id": "98d4ad55-f3d2-4f96-b4c5-d404d620cfd3"
}
}