79.174.83.7 — intel.lukealbertson.com

Indicator 79.174.83.7 Type ip Category C2 Infrastructure Family CobaltStrike Hosting Domain names registrar REG.RU, Ltd Confidence high VT Score 0/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-07-15 16:00:15 UTC Shodan View on Shodan ↗

Raw JSON

{
  "hash": 1424971015,
  "product": "Cobalt Strike Beacon",
  "http": {
    "status": 404,
    "robots_hash": null,
    "redirects": [],
    "title_hash": null,
    "securitytxt": null,
    "title": null,
    "sitemap_hash": null,
    "robots": null,
    "dom_hash": 0,
    "headers_hash": -1392026739,
    "host": "79.174.83.7",
    "html": "",
    "server_hash": 869690771,
    "location": "/",
    "components": {
      "Apache HTTP Server": {
        "categories": [
          "Web servers"
        ]
      }
    },
    "securitytxt_hash": null,
    "server": "Apache",
    "sitemap": null,
    "html_hash": 0
  },
  "os": null,
  "transport": "tcp",
  "timestamp": "2026-04-17T20:12:27.055571",
  "isp": "\"Domain names registrar REG.RU\", Ltd",
  "cpe23": [
    "cpe:2.3:a:apache:http_server",
    "cpe:2.3:a:helpsystems:cobalt_strike"
  ],
  "cpe": [
    "cpe:/a:apache:http_server",
    "cpe:/a:helpsystems:cobalt_strike"
  ],
  "_shodan": {
    "region": "na",
    "module": "http-simple-new",
    "ptr": true,
    "options": {},
    "id": "1feda81e-dc74-44a9-9835-db44142aa508",
    "crawler": "3124f6522112ee44fee0b3f6f7c3f3a76b8f7893"
  },
  "asn": "AS197695",
  "hostnames": [
    "79-174-83-7.cloudvps.regruhosting.ru"
  ],
  "location": {
    "city": "Moscow",
    "region_code": "MOW",
    "area_code": null,
    "longitude": 37.61556,
    "latitude": 55.75222,
    "country_code": "RU",
    "country_name": "Russian Federation"
  },
  "ip": 1336824583,
  "domains": [
    "regruhosting.ru"
  ],
  "org": "Domain names registrar REG.RU, Ltd",
  "data": "HTTP/1.1 404 Not Found\r\nDate: Fri, 17 Apr 2026 20:12:26 GMT\r\nServer: Apache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/plain\r\n\r\n",
  "port": 4848,
  "ip_str": "79.174.83.7"
}