178.16.55.108
C2 Infrastructure AsyncRAT Indicator 178.16.55.108 Type ip Category C2 Infrastructure Family AsyncRAT Hosting dus.net GmbH Confidence high VT Score 19/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-04-25 08:00:05 UTC Shodan View on Shodan ↗
Raw JSON
{
"product": "AsyncRAT",
"hash": 0,
"os": null,
"asn": "AS40999",
"tags": [
"c2",
"self-signed"
],
"timestamp": "2026-03-26T16:08:05.811472",
"isp": "dus.net GmbH",
"transport": "tcp",
"_shodan": {
"region": "na",
"crawler": "667c9d6cc4bbbf0594c20c6f1ba56a8147913fd0",
"options": {},
"module": "https",
"id": "1fc8cb26-3214-479e-8de6-8c0b9b337fbb"
},
"ssl": {
"chain_sha256": [
"d68747dafe52de70247a0710f4db9542d020ecfe9a029615dc5833d4405b19a6"
],
"jarm": "22b22b00022b22b22b22b22b22b22bd3b67dd3674d9af9dd91c1955a35d0e9",
"tlsext": [
{
"id": 23,
"name": "extended_master_secret"
},
{
"id": 65281,
"name": "renegotiation_info"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nn4Dg6WHrYaxXIgxO2C1xh1j+cc2mNg==\n-----END CERTIFICATE-----\n"
],
"versions": [
"TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"-TLSv1.2",
"-TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha512WithRSAEncryption",
"issued": "20231022080318Z",
"expires": "99991231235959Z",
"pubkey": {
"bits": 4096,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"data": "\\x04\\x14\\xf6]2\\x81\\xb2\\xebRu>Wa\\xd4\\x88\"\\n\\x8a6\\xa19\\xee",
"name": "subjectKeyIdentifier"
},
{
"critical": true,
"data": "0\\x03\\x01\\x01\\xff",
"name": "basicConstraints"
}
],
"fingerprint": {
"sha256": "d68747dafe52de70247a0710f4db9542d020ecfe9a029615dc5833d4405b19a6",
"sha1": "1fb46eb133b6c769c85a582c3cda037af7f987c7"
},
"serial": 8.003922317687487e+35,
"issuer": {
"CN": "AsyncRAT Server"
},
"expired": false,
"subject": {
"CN": "AsyncRAT Server"
}
},
"cipher": {
"version": "TLSv1.0",
"bits": 256,
"name": "ECDHE-RSA-AES256-SHA"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"SSLv3/TLS read server certificate",
"SSLv3/TLS read server key exchange",
"SSLv3/TLS read server done",
"SSLv3/TLS write client key exchange",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSLv3/TLS read change cipher spec",
"SSLv3/TLS read finished",
"SSL negotiation finished successfully"
],
"ja3s": "b74704234e6128f33bff9865696e31b3",
"ocsp": {}
},
"hostnames": [],
"location": {
"city": "Düsseldorf",
"region_code": "NW",
"area_code": null,
"longitude": 6.77616,
"latitude": 51.22172,
"country_code": "DE",
"country_name": "Germany"
},
"ip": 2987407212,
"domains": [],
"org": "dus.net GmbH",
"data": "",
"port": 443,
"ip_str": "178.16.55.108"
}