Brute Ratel C4 Detected – 18[.]193[.]241[.]248:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2022-07-25T15:34:30.700361

Cloud Information

Provider	Amazon
Region	eu-central-1
Service	AMAZON
ASN	AS16509

Domain Information

Domains

ink.wf

HTTP Information

Redirects
Headers Hash	-2139866268
Host	18[.]193[.]241[.]248
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	nginx/1.18.0 (Ubuntu)
Sitemap	N/A
Sitemap hash	N/A
Status	200
Title	N/A

Location Information

Area Code	N/A
City	Frankfurt am Main
Country Code	DE
Country Name	Germany
Latitude	50.11552
Longitude	8.68417
Region Code	N/A

SSL Information

Cert Fingerprint SHA1	699ee5994211f811af6374140193bc9054f15d46
Cert Fingerprint SHA256	a1f2388dab76fbefd425d148ec40e0d1a72b72c6c4cc8cd414bc21c8bbfa2bae
Issuer	Amazon
Subject CN	ink.wf
Expired	N/A
Cipher	ECDHE-RSA-AES128-GCM-SHA256
Version

Tag Information

Tags	cloud
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 200 OK Date: Mon, 25 Jul 2022 15:34:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 18 Connection: keep-alive Server: nginx/1.18.0 (Ubuntu)
Port	443
IP	18[.]193[.]241[.]248

---

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon using the button below

---

To keep up to date follow us on the below channels.