Brute Ratel C4 Detected – 47[.]242[.]33[.]173:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2022-08-29T18:46:16.014760

Cloud Information

Provider	Alibaba Cloud
Region	N/A
Service	N/A
ASN	AS45102

Domain Information

Domains

certirsa.us

HTTP Information

Redirects
Headers Hash	-849913362
Host	47[.]242[.]33[.]173
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	nginx/1.18.0 (Ubuntu)
Sitemap	N/A
Sitemap hash	N/A
Status	200
Title	N/A

Location Information

Area Code	N/A
City	Hong Kong
Country Code	HK
Country Name	Hong Kong
Latitude	22.27832
Longitude	114.17469
Region Code	N/A

SSL Information

Cert Fingerprint SHA1	80eaf99eb4b1cab50b0e53918566846be626c908
Cert Fingerprint SHA256	bcc833aef13bd8bff205b918a0f66d6271ab842c33dcfecbf9bda167e16a62af
Issuer	Let’s Encrypt
Subject CN	www.certirsa.us
Expired	N/A
Cipher	TLS_AES_256_GCM_SHA384
Version

Tag Information

Tags	cloud
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 29 Aug 2022 18:46:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 18 Connection: keep-alive
Port	443
IP	47[.]242[.]33[.]173

---

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon using the button below

---

To keep up to date follow us on the below channels.