Empire C2 Detected - 149[.]28[.]146[.]251:80

The Information provided at the time of posting was detected as “Empire C2”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2023-02-10T08:08:15.120768

General Information

Cloud Provider	Vultr
Cloud Region	N/A
Service	N/A
Domains	vultrusercontent[.]com
Hostnames	149[.]28[.]146[.]251[.]vultrusercontent[.]com
HTTP Host	149[.]28[.]146[.]251
ISP	The Constant Company, LLC
ORG	Vultr Holdings, LLC
OS	N/A
HTTP	–!>
HTTP HTML HASH	611100469
HTTP LOCATION	/
HTTP REDIRECTS
HTTP ROBOTS	N/A
HTTP ROBOTS HASH	N/A
HTTP SECURITY.TXT	N/A
HTTP SECURITY.TXT HASH	N/A A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality. If you like the site, please support us on Patreon using the button below To keep up to date follow us on the below channels. Click Above for Telegram Click Above for Discord Click Above for Reddit Click Above For LinkedIn Continue Reading Previous Empire C2 Detected – 144[.]38[.]218[.]101:80 Next Empire C2 Detected – 66[.]42[.]48[.]188:80 You may have missed Data Breach Ransomware [BIANLIAN] – Ransomware Victim: Trinity Petroleum Management, LLC November 23, 2024 CISA CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments November 22, 2024 Data Breach Ransomware [RANSOMHUB] – Ransomware Victim: blr[.]com November 22, 2024 Bug Bounty HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r November 22, 2024 Data Breach Ransomware [LOCKBIT3] – Ransomware Victim: madison-home[.]com November 22, 2024 Copyright © All rights reserved. \| CoverNews by AF themes. We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok

General Information

You may have missed

[BIANLIAN] – Ransomware Victim: Trinity Petroleum Management, LLC

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

[RANSOMHUB] – Ransomware Victim: blr[.]com

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

[LOCKBIT3] – Ransomware Victim: madison-home[.]com