24.199.124.37
C2 Infrastructure CobaltStrike Indicator 24.199.124.37 Type ip Category C2 Infrastructure Family CobaltStrike Hosting DigitalOcean Confidence high VT Score 10/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-07-08 08:00:43 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 415726629,
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"headers_hash": -1692967738,
"host": "24.199.124.37",
"html": "",
"server_hash": 1597593675,
"location": "/",
"components": {
"Nginx": {
"categories": [
"Web servers",
"Reverse proxies"
],
"versions": [
"1.29.0"
]
}
},
"securitytxt_hash": null,
"server": "nginx/1.29.0",
"sitemap": null,
"html_hash": 0
},
"port": 443,
"transport": "tcp",
"cloud": {
"region": "us-ca",
"service": null,
"provider": "DigitalOcean"
},
"location": {
"city": "Santa Clara",
"region_code": "CA",
"area_code": null,
"longitude": -121.9623,
"latitude": 37.3924,
"country_code": "US",
"country_name": "United States"
},
"product": "Cobalt Strike Beacon",
"hash": 897410793,
"tags": [
"cloud"
],
"timestamp": "2026-04-18T04:23:21.495166",
"ssl": {
"chain_sha256": [
"aacefd9969c3169b89e97c27fe58ffa34ea780b77c474f7bfeb3dc75f26d98fd",
"83624fd338c8d9b023c18a67cb7a9c0519da43d11775b4c6cbdad45c3d997c52"
],
"jarm": "1dd40d40d00040d00042d43d000000831b6af40378e2dd35eeac4e9311926e",
"tlsext": [
{
"id": 43,
"name": "supported_versions"
},
{
"id": 51,
"name": "key_share"
},
{
"id": 0,
"name": "server_name"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----\nMIIDkDCCAxegAwIBAgISBc2H+PsgeKtTnO5H+athJBpTMAoGCCqGSM49BAMDMDIx\nCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF\nODAeFw0yNjAxMTQxNjMwMTZaFw0yNjA0MTQxNjMwMTVaMBkxFzAVBgNVBAMTDnZp\nYS1zZWN1cmUub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/ct57gFDte04\ngEQM/XBis6z8bWvfzIElFAh5BCOnvGFHjPih8B5qcu9zEFk363ZcQp1KwQsq6tVy\nW9OJF2Wn26OCAiQwggIgMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEF\nBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUd93WhSdhmA/I\npLX7N5cCVp376DQwHwYDVR0jBBgwFoAUjw0TovYuftFQbDMYOF1ZjiNykcowMgYI\nKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRwOi8vZTguaS5sZW5jci5vcmcv\nMBkGA1UdEQQSMBCCDnZpYS1zZWN1cmUub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIB\nMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9lOC5jLmxlbmNyLm9yZy84NC5jcmww\nggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAOV5S8866pPjMbLJkHs/eQ35vCPXEy\nJd0hqSWsYcVOIQAAAZu9jYR+AAAEAwBHMEUCIHoG8r83dNKr1ABEsaI4wc5mCW2F\npUmnUD6rigC3jPBbAiEApaDh8Am1zmEWLYbtk7gqeeo7ZPCPkvuPEtLjxSNBAusA\nfgClyXiSXVdGF4KHDdiJZgtcVWSLfQBA8uwHaFHRiGkZ9wAAAZu9jYfWAAgAAAUA\nLvr3HwQDAEcwRQIhALs/WcxtIeHygJM6Kj1AVsZjYKPx5nM2ICwoEWhd4aTMAiBH\nxPyLz7oIqDDTQLersP91FG7H5HyQBX+SpuwYmrXaoTAKBggqhkjOPQQDAwNnADBk\nAjBixLOOO7ISnWm8Wr1gbUUpofkArrh15cCYe9wvLu88X/5BD9PV9l27jkxQOAZB\nvykCMFG8M35JrI7w+Qrd41LDYJXtPrjQP8N/zI+KY5jTrd0HFYJjPvAAc/swvd1W\nHIVlRw==\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nu1igv3OefnWjSQ==\n-----END CERTIFICATE-----\n"
],
"versions": [
"-TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "ecdsa-with-SHA384",
"issued": "20260114163016Z",
"expires": "20260414163015Z",
"pubkey": {
"bits": 256,
"type": "dsa"
},
"version": 2,
"extensions": [
{
"critical": true,
"data": "\\x03\\x02\\x07\\x80",
"name": "keyUsage"
},
{
"data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",
"name": "extendedKeyUsage"
},
{
"critical": true,
"data": "0\\x00",
"name": "basicConstraints"
},
{
"data": "\\x04\\x14w\\xdd\\xd6\\x85\\'a\\x98\\x0f\\xc8\\xa4\\xb5\\xfb7\\x97\\x02V\\x9d\\xfb\\xe84",
"name": "subjectKeyIdentifier"
},
{
"data": "0\\x16\\x80\\x14\\x8f\\r\\x13\\xa2\\xf6.~\\xd1Pl3\\x188]Y\\x8e#r\\x91\\xca",
"name": "authorityKeyIdentifier"
},
{
"data": "0$0\"\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x16http://e8.i.lencr.org/",
"name": "authorityInfoAccess"
},
{
"data": "0\\x10\\x82\\x0evia-secure.org",
"name": "subjectAltName"
},
{
"data": "0\\n0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
"name": "certificatePolicies"
},
{
"data": "0$0\"\\xa0 \\xa0\\x1e\\x86\\x1chttp://e8.c.lencr.org/84.crl",
"name": "crlDistributionPoints"
},
{
"data": "\\x04\\x81\\xfa\\x00\\xf8\\x00v\\x00\\x0eW\\x94\\xbc\\xf3\\xae\\xa9>3\\x1b,\\x99\\x07\\xb3\\xf7\\x90\\xdf\\x9b\\xc2=q2%\\xdd!\\xa9%\\xaca\\xc5N!\\x00\\x00\\x01\\x9b\\xbd\\x8d\\x84~\\x00\\x00\\x04\\x03\\x00G0E\\x02 z\\x06\\xf2\\xbf7t\\xd2\\xab\\xd4\\x00D\\xb1\\xa28\\xc1\\xcef\\tm\\x85\\xa5I\\xa7P>\\xab\\x8a\\x00\\xb7\\x8c\\xf0[\\x02!\\x00\\xa5\\xa0\\xe1\\xf0\\t\\xb5\\xcea\\x16-\\x86\\xed\\x93\\xb8*y\\xea;d\\xf0\\x8f\\x92\\xfb\\x8f\\x12\\xd2\\xe3\\xc5#A\\x02\\xeb\\x00~\\x00\\xa5\\xc9x\\x92]WF\\x17\\x82\\x87\\r\\xd8\\x89f\\x0b\\\\Ud\\x8b}\\x00@\\xf2\\xec\\x07hQ\\xd1\\x88i\\x19\\xf7\\x00\\x00\\x01\\x9b\\xbd\\x8d\\x87\\xd6\\x00\\x08\\x00\\x00\\x05\\x00.\\xfa\\xf7\\x1f\\x04\\x03\\x00G0E\\x02!\\x00\\xbb?Y\\xccm!\\xe1\\xf2\\x80\\x93:*=@V\\xc6c`\\xa3\\xf1\\xe6s6 ,(\\x11h]\\xe1\\xa4\\xcc\\x02 G\\xc4\\xfc\\x8b\\xcf\\xba\\x08\\xa80\\xd3@\\xb7\\xab\\xb0\\xffu\\x14n\\xc7\\xe4|\\x90\\x05\\x7f\\x92\\xa6\\xec\\x18\\x9a\\xb5\\xda\\xa1",
"name": "ct_precert_scts"
}
],
"fingerprint": {
"sha256": "aacefd9969c3169b89e97c27fe58ffa34ea780b77c474f7bfeb3dc75f26d98fd",
"sha1": "bbd348230208592bf9af605c09e9347cf60bf99c"
},
"serial": 5.05500053440103e+41,
"issuer": {
"C": "US",
"CN": "E8",
"O": "Let's Encrypt"
},
"expired": true,
"subject": {
"CN": "via-secure.org"
}
},
"cipher": {
"version": "TLSv1.3",
"bits": 256,
"name": "TLS_AES_256_GCM_SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"TLSv1.3 read encrypted extensions",
"SSLv3/TLS read server certificate",
"TLSv1.3 read server certificate verify",
"SSLv3/TLS read finished",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSL negotiation finished successfully"
],
"ja3s": "574866101f64002c6421cc329e4d5458",
"ocsp": {}
},
"hostnames": [
"via-secure.org"
],
"org": "DigitalOcean, LLC",
"data": "HTTP/1.1 404 Not Found\r\nServer: nginx/1.29.0\r\nDate: Sat, 18 Apr 2026 04:22:55 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n",
"asn": "AS14061",
"cpe23": [
"cpe:2.3:a:f5:nginx:1.29.0",
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"isp": "DigitalOcean, LLC",
"cpe": [
"cpe:/a:f5:nginx:1.29.0",
"cpe:/a:helpsystems:cobalt_strike"
],
"domains": [
"via-secure.org"
],
"ip_str": "24.199.124.37",
"os": null,
"_shodan": {
"region": "na",
"crawler": "a4815a8bfadb2b966b4697ac569130d1cfb605d4",
"options": {},
"module": "https",
"id": "5ed69d1e-70d1-48e1-9fae-26911fd2e597"
}
}