130.12.180.141
C2 Infrastructure CobaltStrike Indicator 130.12.180.141 Type ip Category C2 Infrastructure Family CobaltStrike Confidence high VT Score 21/94 Source shodan First Seen 2026-05-16 16:00:50 UTC Last Seen 2026-05-16 16:00:50 UTC Shodan View on Shodan ↗
Raw JSON
{
"hash": -30111644,
"product": "Cobalt Strike Beacon",
"http": {
"status": 404,
"robots_hash": null,
"redirects": [],
"title_hash": null,
"securitytxt": null,
"title": null,
"sitemap_hash": null,
"robots": null,
"dom_hash": 0,
"headers_hash": -56327331,
"host": "130.12.180.141",
"html": "",
"server_hash": -1340961475,
"location": "/",
"components": {
"Nginx": {
"categories": [
"Web servers",
"Reverse proxies"
]
}
},
"securitytxt_hash": null,
"server": "nginx",
"sitemap": null,
"html_hash": 0
},
"os": null,
"transport": "tcp",
"timestamp": "2026-05-16T05:50:37.996002",
"isp": null,
"cpe23": [
"cpe:2.3:a:f5:nginx",
"cpe:2.3:a:helpsystems:cobalt_strike"
],
"cpe": [
"cpe:/a:f5:nginx",
"cpe:/a:helpsystems:cobalt_strike"
],
"_shodan": {
"region": "na",
"module": "http",
"ptr": true,
"options": {},
"id": "809dcb91-6d1e-4a86-81f9-a96764294dfb",
"crawler": "3b30ded3f602a16b2b9b09425b50a05614063bc0"
},
"hostnames": [],
"location": {
"city": null,
"region_code": null,
"area_code": null,
"dma_code": null,
"country_code3": null,
"latitude": null,
"postal_code": null,
"longitude": null,
"country_code": null,
"country_name": null
},
"ip": 2181870733,
"domains": [],
"org": null,
"data": "HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 16 May 2026 05:50:37 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: no-referrer\r\n\r\n",
"port": 80,
"ip_str": "130.12.180.141"
}