Brute Ratel C4 Detected – 219[.]94[.]128[.]44:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2024-03-17T09:19:01.456438

Cloud Information

Provider
Region
Service
ASN	AS9371

Domain Information

Domains

ebe.jp

HTTP Information

Redirects
Headers Hash	899188135
Host	ebe[.]jp
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	nginx
Sitemap	N/A
Sitemap hash	N/A
Status	200
Title	N/A

Location Information

Area Code	N/A
City	Osaka
Country Code	JP
Country Name	Japan
Latitude	34.69379
Longitude	135.50107
Region Code	27

SSL Information

Cert Fingerprint SHA1	ccb1d0a74aa9083d7ccf5f7c9ae9f2b90b05ffc0
Cert Fingerprint SHA256	1d4482018a6223a01017cc1e0771e68cb63e488f37d1801f51785695a940a577
Issuer	Let’s Encrypt
Subject CN	ebe.jp
Expired	N/A
Cipher	ECDHE-RSA-AES256-GCM-SHA384
Version

Tag Information

Tags	c2
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 200 OK Server: nginx Date: Sun, 17 Mar 2024 09:19:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/7.4.33
Port	443
IP	219[.]94[.]128[.]44