Skip to content
Historical list of {Cobalt Strike,NanoHTTPD} servers
Branch: master
Clone or download
Latest commit 43a849c Mar 4, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
README.md Update README.md Mar 4, 2019
cobaltstrike-servers.csv

README.md

Historical list of {Cobalt Strike,NanoHTTPD} servers

This repository contains a historical list of Cobalt Strike (or NanoHTTPD) hosts that have been identified using the "extraneous space" fingerprint.

Read more about this technique in the following blog post:

The list is a CSV file with ip, port, first_seen, last_seen pairs, starting from 2014-01 till 2019-02-26 and can be found here:

The data is derived from Rapid7 Labs OpenData sets which has a historical archive of HTTP and HTTPS scan data: https://opendata.rapid7.com

You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.