82.65.19.134 — intel.lukealbertson.com

Indicator 82.65.19.134 Type ip Category C2 Infrastructure Family AsyncRAT Hosting Free SAS Confidence high VT Score 12/94 Source shodan First Seen 2026-04-25 08:00:05 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
  "product": "AsyncRAT",
  "hash": 0,
  "os": null,
  "asn": "AS12322",
  "tags": [
    "c2",
    "self-signed"
  ],
  "timestamp": "2026-04-18T12:51:34.288481",
  "isp": "Free SAS",
  "transport": "tcp",
  "_shodan": {
    "region": "eu",
    "module": "https-simple-new",
    "ptr": true,
    "options": {},
    "id": "3a260273-69cd-4838-8d66-56a446da8f26",
    "crawler": "cdd92e2d835a37d2798fa6c7105171f4d214012f"
  },
  "ssl": {
    "chain_sha256": [
      "73256482e7051488d52e489abb9e3aa77dd8367953b39855f8d4eab71102b842"
    ],
    "jarm": "22b22b00022b22b22b22b22b22b22bd3b67dd3674d9af9dd91c1955a35d0e9",
    "tlsext": [
      {
        "id": 23,
        "name": "extended_master_secret"
      },
      {
        "id": 65281,
        "name": "renegotiation_info"
      }
    ],
    "chain": [
      "-----BEGIN CERTIFICATE-----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\nFmXotJMZi0enpnxj25uEy9zjyyotUQ==\n-----END CERTIFICATE-----\n"
    ],
    "versions": [],
    "acceptable_cas": [],
    "alpn": [],
    "cert": {
      "sig_alg": "sha512WithRSAEncryption",
      "issued": "20210421113246Z",
      "expires": "99991231235959Z",
      "pubkey": {
        "bits": 4096,
        "type": "rsa"
      },
      "version": 2,
      "extensions": [
        {
          "data": "\\x04\\x14\\xd5\\x1f\\xe9\\xe1\\xb4<\\xda:\\r\\xc7\\xca\\x8c\\xa2\\x11(\\xb8J)\\x9c\\xd4",
          "name": "subjectKeyIdentifier"
        },
        {
          "critical": true,
          "data": "0\\x03\\x01\\x01\\xff",
          "name": "basicConstraints"
        }
      ],
      "fingerprint": {
        "sha256": "73256482e7051488d52e489abb9e3aa77dd8367953b39855f8d4eab71102b842",
        "sha1": "a9990103ef2745e7deac94dbfe252f14cb4d63e9"
      },
      "serial": 1.0864968584920847e+36,
      "issuer": {
        "CN": "AsyncRAT Server"
      },
      "expired": false,
      "subject": {
        "CN": "AsyncRAT Server"
      }
    },
    "cipher": {
      "version": "TLSv1.0",
      "bits": 256,
      "name": "ECDHE-RSA-AES256-SHA"
    },
    "trust": {
      "revoked": false,
      "browser": null
    },
    "handshake_states": [
      "before SSL initialization",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "SSLv3/TLS read server certificate",
      "SSLv3/TLS read server key exchange",
      "SSLv3/TLS read server done",
      "SSLv3/TLS write client key exchange",
      "SSLv3/TLS write change cipher spec",
      "SSLv3/TLS write finished",
      "SSLv3/TLS read change cipher spec",
      "SSLv3/TLS read finished",
      "SSL negotiation finished successfully"
    ],
    "ja3s": "b74704234e6128f33bff9865696e31b3",
    "ocsp": {}
  },
  "hostnames": [
    "82-65-19-134.subs.proxad.net"
  ],
  "location": {
    "city": "Orgeval",
    "region_code": "IDF",
    "area_code": null,
    "longitude": 1.9779,
    "latitude": 48.92162,
    "country_code": "FR",
    "country_name": "France"
  },
  "ip": 1379996550,
  "domains": [
    "proxad.net"
  ],
  "org": "Free SAS",
  "data": "",
  "port": 4443,
  "ip_str": "82.65.19.134"
}