3.38.253.157 — intel.lukealbertson.com

Indicator 3.38.253.157 Type ip Category C2 Infrastructure Family CobaltStrike Hosting AWS Confidence high VT Score 9/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-04-18 05:03:23 UTC Shodan View on Shodan ↗

Raw JSON

{
  "ip": 52886941,
  "http": {
    "status": 404,
    "robots_hash": null,
    "redirects": [],
    "title_hash": null,
    "securitytxt": null,
    "title": null,
    "sitemap_hash": null,
    "robots": null,
    "dom_hash": 0,
    "headers_hash": 2129120964,
    "host": "3.38.253.157",
    "html": "",
    "server_hash": null,
    "location": "/",
    "components": {},
    "securitytxt_hash": null,
    "server": null,
    "sitemap": null,
    "html_hash": 0
  },
  "port": 80,
  "transport": "tcp",
  "cloud": {
    "region": "ap-northeast-2",
    "service": "EC2",
    "provider": "Amazon"
  },
  "location": {
    "city": "Incheon",
    "region_code": "28",
    "area_code": null,
    "longitude": 126.70515,
    "latitude": 37.45646,
    "country_code": "KR",
    "country_name": "Korea, Republic of"
  },
  "product": "Cobalt Strike Beacon",
  "hash": -1330097399,
  "tags": [
    "cloud"
  ],
  "timestamp": "2026-04-17T07:43:56.370206",
  "hostnames": [
    "ec2-3-38-253-157.ap-northeast-2.compute.amazonaws.com"
  ],
  "org": "AWS Asia Pacific (Seoul) Region",
  "data": "HTTP/1.1 404 Not Found\r\nDate: Fri, 17 Apr 2026 07:44:57 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
  "asn": "AS16509",
  "cpe23": [
    "cpe:2.3:a:helpsystems:cobalt_strike"
  ],
  "isp": "Amazon.com, Inc.",
  "cpe": [
    "cpe:/a:helpsystems:cobalt_strike"
  ],
  "domains": [
    "amazonaws.com"
  ],
  "ip_str": "3.38.253.157",
  "os": null,
  "_shodan": {
    "region": "na",
    "crawler": "1ad7dd0071d724b916894d677e734fae1da92142",
    "options": {},
    "module": "http",
    "id": "326709d9-1d05-47a2-98e5-bb2d91f06863"
  }
}