Brute Ratel C4 Detected – 3[.]25[.]139[.]251:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2022-07-31T12:19:44.321801

Cloud Information

Provider	Amazon
Region	ap-southeast-2
Service	AMAZON
ASN	AS16509

Domain Information

Domains

amazonaws.com

HTTP Information

Redirects
Headers Hash	144518609
Host	3[.]25[.]139[.]251
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	N/A
Sitemap	N/A
Sitemap hash	N/A
Status	200
Title	N/A

Location Information

Area Code	N/A
City	Sydney
Country Code	AU
Country Name	Australia
Latitude	-33.86785
Longitude	151.20732
Region Code	N/A

SSL Information

Cert Fingerprint SHA1	e1d6098d858250c74eb6dd98746368eb06406cb3
Cert Fingerprint SHA256	c3176dedcd01e0d1b6e0c7e83542a220b7e780f8c843f2dfa76e45a4b64d45de
Issuer	Let’s Encrypt
Subject CN	digitalhealthrecord.live
Expired	N/A
Cipher	TLS_AES_128_GCM_SHA256
Version

Tag Information

Tags	cloud
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 200 OK Date: Sun, 31 Jul 2022 12:19:44 GMT Content-Length: 18 Content-Type: text/plain; charset=utf-8
Port	443
IP	3[.]25[.]139[.]251

---

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon using the button below

---

To keep up to date follow us on the below channels.