103.48.84.225
C2 Infrastructure AsyncRAT Indicator 103.48.84.225 Type ip Category C2 Infrastructure Family AsyncRAT Hosting Long Van System Solution JSC Confidence high VT Score 9/94 Source shodan First Seen 2026-10-02 16:00:33 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
"product": "AsyncRAT",
"hash": 0,
"os": null,
"asn": "AS131423",
"tags": [
"c2",
"self-signed"
],
"timestamp": "2026-09-25T18:38:25.641203",
"isp": "Branch of Long Van System Solution JSC - Hanoi",
"transport": "tcp",
"_shodan": {
"region": "eu",
"module": "https",
"ptr": true,
"options": {},
"id": "6ebdc262-7abb-4613-a446-e42ef4167a58",
"crawler": "240a12b6c2ac5dba30ed961e4ab8f056540fdaf0"
},
"ssl": {
"chain_sha256": [
"0f8b75b71a24285d55d0e5a7dbe835f8f2e02670c1e94abb1053c24758214752"
],
"jarm": "22b22b00022b22b22b22b22b22b22bd3b67dd3674d9af9dd91c1955a35d0e9",
"tlsext": [
{
"id": 23,
"name": "extended_master_secret"
},
{
"id": 65281,
"name": "renegotiation_info"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\n/rM5+56MWTOH27FKyFHY4820NRsn2Q==\n-----END CERTIFICATE-----\n"
],
"versions": [
"TLSv1",
"-SSLv2",
"-SSLv3",
"-TLSv1.1",
"-TLSv1.2",
"-TLSv1.3"
],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha512WithRSAEncryption",
"issued": "20260919082034Z",
"expires": "99991231235959Z",
"pubkey": {
"bits": 4096,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"data": "\\x04\\x14\\xf2\\xda\\xe5\\x03\\x97\\x81\\xdf\\x81\\xa6\\x85Q\\xfd\\xb4ZN\\x15x_2\\xd2",
"name": "subjectKeyIdentifier"
},
{
"critical": true,
"data": "0\\x03\\x01\\x01\\xff",
"name": "basicConstraints"
}
],
"fingerprint": {
"sha256": "0f8b75b71a24285d55d0e5a7dbe835f8f2e02670c1e94abb1053c24758214752",
"sha1": "b5412a9041329eeb94e8873808e75dfec0da0b5e"
},
"serial": 1.277199156811577e+36,
"issuer": {
"CN": "AsyncRAT Server"
},
"expired": false,
"subject": {
"CN": "AsyncRAT Server"
}
},
"cipher": {
"version": "TLSv1.0",
"bits": 256,
"name": "ECDHE-RSA-AES256-SHA"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"SSLv3/TLS read server certificate",
"SSLv3/TLS read server key exchange",
"SSLv3/TLS read server done",
"SSLv3/TLS write client key exchange",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSLv3/TLS read change cipher spec",
"SSLv3/TLS read finished",
"SSL negotiation finished successfully"
],
"ja3s": "b74704234e6128f33bff9865696e31b3",
"ocsp": {}
},
"hostnames": [],
"location": {
"city": "Ho Chi Minh City",
"region_code": "SG",
"area_code": null,
"longitude": 106.62965,
"latitude": 10.82302,
"country_code": "VN",
"country_name": "Viet Nam"
},
"ip": 1731220705,
"domains": [],
"org": "Long Van System Solution JSC",
"data": "",
"port": 443,
"ip_str": "103.48.84.225"
}