{"id":13797059,"url":"https://github.com/fox-it/cobaltstrike-extraneous-space","last_synced_at":"2026-02-23T16:33:59.434Z","repository":{"id":74469245,"uuid":"172706569","full_name":"fox-it/cobaltstrike-extraneous-space","owner":"fox-it","description":"Historical list of {Cobalt Strike,NanoHTTPD} servers","archived":false,"fork":false,"pushed_at":"2019-04-30T09:08:50.000Z","size":200,"stargazers_count":120,"open_issues_count":0,"forks_count":45,"subscribers_count":11,"default_branch":"master","last_synced_at":"2026-01-26T13:53:05.652Z","etag":null,"topics":["cobaltstrike","iocs","nanohttpd","teamserver"],"latest_commit_sha":null,"homepage":"https://blog.fox-it.com/2019/02/26/identifying-cobalt-strike-team-servers-in-the-wild/","language":null,"has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fox-it.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-02-26T12:23:03.000Z","updated_at":"2025-12-09T13:30:48.000Z","dependencies_parsed_at":"2024-01-07T06:23:05.342Z","dependency_job_id":"a192c6ca-5e4d-4248-9c46-ff2e83b92924","html_url":"https://github.com/fox-it/cobaltstrike-extraneous-space","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/fox-it/cobaltstrike-extraneous-space","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Fcobaltstrike-extraneous-space","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Fcobaltstrike-extraneous-space/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Fcobaltstrike-extraneous-space/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Fcobaltstrike-extraneous-space/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fox-it","download_url":"https://codeload.github.com/fox-it/cobaltstrike-extraneous-space/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fox-it%2Fcobaltstrike-extraneous-space/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29748219,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-23T07:44:07.782Z","status":"ssl_error","status_checked_at":"2026-02-23T07:44:07.432Z","response_time":90,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cobaltstrike","iocs","nanohttpd","teamserver"],"created_at":"2024-08-03T23:01:21.134Z","updated_at":"2026-02-23T16:33:59.392Z","avatar_url":"https://github.com/fox-it.png","language":null,"funding_links":[],"categories":["\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集"],"sub_categories":[],"readme":"# Historical list of {Cobalt Strike,NanoHTTPD} servers\n\nThis repository contains a historical list of Cobalt Strike (or NanoHTTPD) hosts that have been identified using the \"extraneous space\" fingerprint.\n\nRead more about this technique in the following blog post:\n\n * https://blog.fox-it.com/2019/02/26/identifying-cobalt-strike-team-servers-in-the-wild/\n\nThe list is a CSV file with `ip, port, first_seen, last_seen` pairs, starting from 2014-01 till 2019-04-21 and can be found here:\n\n * [cobaltstrike-servers.csv](cobaltstrike-servers.csv) ([raw link](https://raw.githubusercontent.com/fox-it/cobaltstrike-extraneous-space/master/cobaltstrike-servers.csv))\n\nThe data is derived from Rapid7 Labs OpenData sets which has a historical archive of HTTP and HTTPS scan data: https://opendata.rapid7.com\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffox-it%2Fcobaltstrike-extraneous-space","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffox-it%2Fcobaltstrike-extraneous-space","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffox-it%2Fcobaltstrike-extraneous-space/lists"}