156.40.156.39 — intel.lukealbertson.com

Indicator 156.40.156.39 Type ip Category C2 Infrastructure Family CobaltStrike Hosting National Institutes of Health Confidence high VT Score 7/94 Source shodan First Seen 2026-08-28 00:00:24 UTC Last Seen 2026-09-04 00:00:58 UTC Shodan View on Shodan ↗

Raw JSON

{
  "hash": -1156945915,
  "product": "Cobalt Strike Beacon",
  "http": {
    "status": 404,
    "robots_hash": null,
    "redirects": [],
    "title_hash": null,
    "securitytxt": null,
    "title": null,
    "sitemap_hash": null,
    "robots": null,
    "dom_hash": 0,
    "components_hash": 0,
    "headers_hash": 2129120964,
    "host": "156.40.156.39",
    "html": "",
    "server_hash": null,
    "location": "/",
    "components": {},
    "securitytxt_hash": null,
    "headers": {
      "date": "Wed, 26 Aug 2026 17:40:31 GMT",
      "content-length": "0",
      "content-type": "text/plain"
    },
    "server": null,
    "sitemap": null,
    "html_hash": 0
  },
  "os": null,
  "transport": "tcp",
  "timestamp": "2026-08-26T17:40:31.923778",
  "isp": "National Institutes of Health",
  "cpe23": [
    "cpe:2.3:a:helpsystems:cobalt_strike"
  ],
  "cpe": [
    "cpe:/a:helpsystems:cobalt_strike"
  ],
  "_shodan": {
    "region": "na",
    "module": "http",
    "ptr": true,
    "options": {},
    "id": "7db7a382-5b4a-404b-a085-f1505b7332bb",
    "crawler": "fce091bb56e19f2cc04e7cd0f9c8a1c1805d961a"
  },
  "cpe23_hash": -527748401,
  "asn": "AS3527",
  "hostnames": [],
  "location": {
    "city": "Bethesda",
    "region_code": "MD",
    "area_code": null,
    "longitude": -77.10026,
    "latitude": 38.98067,
    "country_code": "US",
    "country_name": "United States"
  },
  "ip": 2619907111,
  "domains": [],
  "org": "National Institutes of Health",
  "data": "HTTP/1.1 404 Not Found\r\nDate: Wed, 26 Aug 2026 17:40:31 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\n\r\n",
  "port": 80,
  "ip_str": "156.40.156.39"
}