Brute Ratel C4 Detected – 211[.]76[.]170[.]240:443

January 9, 2024

Brute Ratel C4 Detection Alerts

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2024-01-08T12:37:41.776671

brute ratel c4
Brute Ratel C4

Cloud Information

Provider
Region
Service
ASNAS18181

Domain Information

Domainsnhri.edu.tw

HTTP Information

Redirects[object Object]
Headers Hash-7868837
Hosttamtp[.]nhri[.]edu[.]tw
HTML404 file not found
HTML Hash-1957161625
Location/
RobotsN/A
Robots HashN/A
Security TXTN/A
Security TXT HashN/A
ServerN/A
SitemapN/A
Sitemap hashN/A
Status403
TitleN/A

Location Information

Area CodeN/A
CityTaipei
Country CodeTW
Country NameTaiwan
Latitude25.04776
Longitude121.53185
Region Code04

SSL Information

Cert Fingerprint SHA18bf0e69baa422d402d693bd1229794ffc75aed25
Cert Fingerprint SHA2564bb39efba37795c2815f9e341433d54bf4f0df6fb5471e38bae938706e3efb58
IssuerTAIWAN-CA
Subject CN*.nhri.edu.tw
ExpiredN/A
CipherECDHE-RSA-AES128-GCM-SHA256
Version

Tag Information

Tagsc2
Tags
TagsN/A
TagsN/A

Host Information

OSN/A
Transporttcp
DataHTTP/1.1 403 Forbidden Date: Mon, 08 Jan 2024 12:37:43 GMT Content-Length: 18 Content-Type: text/html; charset=iso-8859-1
Port443
IP211[.]76[.]170[.]240

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

Buy Me A Coffee
Patreon

To keep up to date follow us on the below channels.

You may have missed

image 1

CVE Alert: CVE-2024-52867

November 18, 2024
image 1

CVE Alert: CVE-2020-25720

November 18, 2024
image 1

CVE Alert: CVE-2023-4639

November 18, 2024
image 1

CVE Alert: CVE-2023-1419

November 18, 2024
image 1

CVE Alert: CVE-2023-43091

November 18, 2024