Indicator 103.48.84.225 Type ip Category C2 Infrastructure Family AsyncRAT Hosting Long Van System Solution JSC Confidence high VT Score 9/94 Source shodan First Seen 2026-10-02 16:00:33 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
  "product": "AsyncRAT",
  "hash": 0,
  "os": null,
  "asn": "AS131423",
  "tags": [
    "c2",
    "self-signed"
  ],
  "timestamp": "2026-09-25T18:38:25.641203",
  "isp": "Branch of Long Van System Solution JSC - Hanoi",
  "transport": "tcp",
  "_shodan": {
    "region": "eu",
    "module": "https",
    "ptr": true,
    "options": {},
    "id": "6ebdc262-7abb-4613-a446-e42ef4167a58",
    "crawler": "240a12b6c2ac5dba30ed961e4ab8f056540fdaf0"
  },
  "ssl": {
    "chain_sha256": [
      "0f8b75b71a24285d55d0e5a7dbe835f8f2e02670c1e94abb1053c24758214752"
    ],
    "jarm": "22b22b00022b22b22b22b22b22b22bd3b67dd3674d9af9dd91c1955a35d0e9",
    "tlsext": [
      {
        "id": 23,
        "name": "extended_master_secret"
      },
      {
        "id": 65281,
        "name": "renegotiation_info"
      }
    ],
    "chain": [
      "-----BEGIN CERTIFICATE-----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\n/rM5+56MWTOH27FKyFHY4820NRsn2Q==\n-----END CERTIFICATE-----\n"
    ],
    "versions": [
      "TLSv1",
      "-SSLv2",
      "-SSLv3",
      "-TLSv1.1",
      "-TLSv1.2",
      "-TLSv1.3"
    ],
    "acceptable_cas": [],
    "alpn": [],
    "cert": {
      "sig_alg": "sha512WithRSAEncryption",
      "issued": "20260919082034Z",
      "expires": "99991231235959Z",
      "pubkey": {
        "bits": 4096,
        "type": "rsa"
      },
      "version": 2,
      "extensions": [
        {
          "data": "\\x04\\x14\\xf2\\xda\\xe5\\x03\\x97\\x81\\xdf\\x81\\xa6\\x85Q\\xfd\\xb4ZN\\x15x_2\\xd2",
          "name": "subjectKeyIdentifier"
        },
        {
          "critical": true,
          "data": "0\\x03\\x01\\x01\\xff",
          "name": "basicConstraints"
        }
      ],
      "fingerprint": {
        "sha256": "0f8b75b71a24285d55d0e5a7dbe835f8f2e02670c1e94abb1053c24758214752",
        "sha1": "b5412a9041329eeb94e8873808e75dfec0da0b5e"
      },
      "serial": 1.277199156811577e+36,
      "issuer": {
        "CN": "AsyncRAT Server"
      },
      "expired": false,
      "subject": {
        "CN": "AsyncRAT Server"
      }
    },
    "cipher": {
      "version": "TLSv1.0",
      "bits": 256,
      "name": "ECDHE-RSA-AES256-SHA"
    },
    "trust": {
      "revoked": false,
      "browser": null
    },
    "handshake_states": [
      "before SSL initialization",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "SSLv3/TLS read server certificate",
      "SSLv3/TLS read server key exchange",
      "SSLv3/TLS read server done",
      "SSLv3/TLS write client key exchange",
      "SSLv3/TLS write change cipher spec",
      "SSLv3/TLS write finished",
      "SSLv3/TLS read change cipher spec",
      "SSLv3/TLS read finished",
      "SSL negotiation finished successfully"
    ],
    "ja3s": "b74704234e6128f33bff9865696e31b3",
    "ocsp": {}
  },
  "hostnames": [],
  "location": {
    "city": "Ho Chi Minh City",
    "region_code": "SG",
    "area_code": null,
    "longitude": 106.62965,
    "latitude": 10.82302,
    "country_code": "VN",
    "country_name": "Viet Nam"
  },
  "ip": 1731220705,
  "domains": [],
  "org": "Long Van System Solution JSC",
  "data": "",
  "port": 443,
  "ip_str": "103.48.84.225"
}