Brute Ratel C4 Detected – 93[.]66[.]153[.]13:9002

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2024-02-29T18:31:58.830099

Cloud Information

Provider
Region
Service
ASN	AS30722

Domain Information

Domains

vodafonedsl.it

HTTP Information

Redirects
Headers Hash	-915182599
Host	93[.]66[.]153[.]13
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	N/A
Sitemap	N/A
Sitemap hash	N/A
Status	404
Title	N/A

Location Information

Area Code	N/A
City	Mestre
Country Code	IT
Country Name	Italy
Latitude	45.49167
Longitude	12.24538
Region Code	34

SSL Information

Cert Fingerprint SHA1	08a8fee9d20c27d3e783f70a520fe1f57ec576fb
Cert Fingerprint SHA256	f0585c1c913039ee6a455ac3d9925e1a3fb8ed4c82c33988b1ce0e6ebc785e3d
Issuer	Let’s Encrypt
Subject CN	francodp.dyndns.tv
Expired	N/A
Cipher	TLS_AES_256_GCM_SHA384
Version

Tag Information

Tags	c2
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 404 Not Found X-Powered-By: Express Content-Type: text/html Date: Thu, 29 Feb 2024 18:30:48 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked
Port	9002
IP	93[.]66[.]153[.]13