77.241.196.163
C2 Infrastructure Covenant Indicator 77.241.196.163 Type ip Category C2 Infrastructure Family Covenant Hosting UAB "Baltnetos komunikacijos" Confidence high VT Score 5/94 Source shodan First Seen 2026-10-02 16:00:33 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
"ip": 1307690147,
"http": {
"redirects": [],
"title_hash": -1841387799,
"favicon": {
"data": "AAABAAEAICAAAAEAIABXBQAAFgAAAIlQTkcNChoKAAAADUlIRFIAAAAgAAAAIAgGAAAAc3p69AAA\nBR5JREFUWIWt13+MXFUVB/DPtHfbN7RWMP0RNIDExl9hpAkxJg0YsdqxQkMCGitR1IolxIqKlZBY\njZoYieKPRiW2BCHBNEFsJYLWSUQbTC2KjZIBWou125ZQ225/st15u3tnn3/c12Vod2e3hZPczNx3\n7zvf7zv3vO85r+JVWLVWr+CD5ZiLCopyeRrOw278EY1WszF8uo+prwK8Bw/iCDZjADMwBRF9JalP\n4kbc2jNv/nk98+b/Kx7cNXjKT+UcgD+Ee3BNq9nYXq3V5+IOfGWSLg7h861m4+GzJlCt1b+Nr5fT\nLVJ4b5Se+mxtLVaOSaBaqy/Fta1m45aOa+vwuTM2tyMDx4ri5FFO7C+0h6fgsco7Fi3Du/EBfBpv\nGgNqQxiH3THs6QC/6wzwYoRj/1Mc2EnRruAonsWvcU+ZcJuxuVqrfxMr8F3M6vDyu3GPoFqr34ub\nsRMtXD66ODyoeHE7A4cL/BI/zWP8+3i+Ony+Gb/BAnyp1WysmczZ7cIXR2dDLUXvNgYO92JhHuNN\nkwGHVrPRi6ukJFwD4x0BPIERPDN6pR0VLzxLbD2H9+cxHpgM8Gkk+qW3CN2z9xFcgPfiW1Ac3sfg\n8T4sORfwsaxbBG7CR0dnQy0O/xdW5jHufS3A6R6B6zonxYmDsC2P8aHXChxCtVafjTmSbr+lvH4U\nC19GLziyD34+kcMshEswGzvyGE9OtH8Krpc0fQUeKsfd5TzZcE57EB7tAjwjC+ER9OIf2J+FsHwy\nBEakgtFpw61mY/3Ls0F4YYLEu1c6tj3YhKdxXxbC1RMRaLSaje1dabaHYFzwLIQ5WIY2fohf4cly\n+fYshHnluDILYWsWwt2n7g3YX63VP17efJdUYPpegTDS7soPF0uFrYW9yKRSDB+WxAx6pCh9LwtB\nHqMpmI71uBU7Ws3GOuyr1urFqPuejJSk49m/MYTBkshBzC/XHsxjnJnHOBOX4U5syGMcjcBYdqTj\nf5+pPf14exZCNY+xdfrmPMb+LIQfS33B1ZKALSwj8oOOfc/jfZ33hpL1x8r5KU3fheN4Pf5iWrVp\nSs83jAwvwmPjkL6zjMJKnI+mJFrNcfajS0NSrdUfxbV4CYuLQ3u26vvPhjzGj3RzmIUAU/MYJ0wc\nuivhxvL3dXhrZdbsrbghC6HWzWEeo4nAsxCumAyBh3Gi/L/M9BmrzZ4P92chTOsGMAH4AmzJQlg9\nEYEWvi+12Q+0mo0/VS648Bey86/A2iyEs25osxAulqrskPTmnZkD1Vr9UqkKHpLK8Eapfb8D5P2N\nYu/TV2nnG/GpPMb+SYIvKMHn4po8xj8zdgRqWITbcREW4534WavZaMlmLqlcsmCz6huux3NZCJ/I\nQhj3+yILYU6pfH+TvhtukHpFY0agjMJ0fAe3SO3YZfgyftJqNm6r1uoXaQ9/oTh+YJUDOysUB/GH\nEiSWbmZLWrBYUsD1Uie0pnzwlXmMf+32Gi7FVklKN0kd7WfxT0nlVmGbOHSfgWOXF4d6dxp66dIS\njFTkmiWx32MJbvNKRb2uW0f0eKvZGKjW6gOSKN0sKeRXy/W12C5Mm2HWXJVZc58otj++XDq2ESnc\nF+JK6Th7Ony3sSqP8bfn8mm2VGpM3njaUlEcP7Dci8/cP4GLHfhMHuOTnMPHaTy4a2fPvPnrcBLv\nkp4UKpVs5gx9u5+ScuZ0ex5fw4rOnvKsI9Bp1Vo9oF6O9+BtWidWF71P/Ugqy7ulvmBTHuOWsXz8\nHxS32WpWNqKsAAAAAElFTkSuQmCC\n",
"hash": -737603591,
"location": "https://77.241.196.163:7443/images/favicon.ico"
},
"html_hash": 1467657314,
"securitytxt": null,
"title": "Covenant",
"sitemap_hash": null,
"headers_hash": 589282136,
"html": "\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n <meta charset=\"utf-8\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no\">\n <meta name=\"description\" content=\"\">\n <meta name=\"author\" content=\"\">\n <link rel=\"icon\" href=\"/images/favicon.ico\" type=\"image/x-icon\">\n <base href=\"/\">\n <title>Covenant</title>\n\n <link rel=\"stylesheet\" href=\"/css/bootstrap.min.css\" />\n <link rel=\"stylesheet\" href=\"/css/bootstrap-datetimepicker.min.css\" />\n <link rel=\"stylesheet\" href=\"/css/bootstrap-select.min.css\" />\n <link rel=\"stylesheet\" href=\"/css/bootstrap-multiselect.css\" />\n <link rel=\"stylesheet\" href=\"/css/jquery.typeahead.min.css\" />\n <link rel=\"stylesheet\" href=\"/dist/feather.css\" />\n <link rel=\"stylesheet\" href=\"/dist/codemirror/lib/codemirror.css\">\n <link rel=\"stylesheet\" href=\"/dist/codemirror/theme/night.css\">\n <link rel=\"stylesheet\" href=\"/css/covenant.css\" />\n <link rel=\"stylesheet\" href=\"/css/covenant-graph.css\" />\n</head>\n<body>\n <app><!--Blazor:{\"sequence\":0,\"type\":\"server\",\"prerenderId\":\"b5b25f2c35e342c7974c6f802525cac5\",\"descriptor\":\"CfDJ8OGcz72zT9NJsmp\\u002BM0kWNeuWbte30IVPUF7Z/pURVpeaYphWHuFBIQOJtgE2RFFHufeQOd8vdItP9DcOBLEm\\u002BJJoBtzFhwDj4BjQ7120oA7yrd7Cpay9NQ5AQGUqWQeqXqhhLeE5\\u002Bl8DE2aPqQuAdRkgx5DkOtKNG/VGKKt42PN4wEcvTS\\u002BJNnPDJ0QabeIPIBFhC63mfQKjW081h6PBz6cHCZ34wzY5w6pBBK4O58D\\u002BM\\u002BQz8/4Pvehm3xRBoHjhoFcMS3klM115CwpgEfSjj3EEEYoNBBxiph4CiaNhucubx2loAPkv7wfNjZhz773iG/T/aDEMA3jpfJt9Yy0Y8/6aAgKUaJTWT0OTb4sOZ6fb\"}-->\n \n \n \n \n \n<!--Blazor:{\"prerenderId\":\"b5b25f2c35e342c7974c6f802525cac5\"}--></app>\n\n <script src=\"/_framework/blazor.server.js\"></script>\n <script src=\"/js/jquery.min.js\"></script>\n <script src=\"/js/popper.min.js\"></script>\n <script src=\"/js/typeahead.bundle.min.js\"></script>\n <script src=\"/js/bootstrap.min.js\"></script>\n <script src=\"/js/moment.min.js\"></script>\n <script src=\"/lib/signalr/dist/browser/signalr.js\"></script>\n <script src=\"/js/bootstrap-select.min.js\"></script>\n <script src=\"/js/bootstrap-multiselect.js\"></script>\n <script src=\"/js/bootstrap-datetimepicker.min.js\"></script>\n <script src=\"/dist/codemirror/lib/codemirror.js\"></script>\n <script src=\"/dist/codemirror/mode/clike/clike.js\"></script>\n <script src=\"/dist/codemirror/mode/htmlmixed/htmlmixed.js\"></script>\n <script src=\"/js/d3.min.js\"></script>\n <script src=\"/js/inputfile.js\"></script>\n <script src=\"/js/components/master.js\"></script>\n</body>\n</html>",
"location": "/",
"server_hash": -1734924932,
"status": 200,
"robots_hash": null,
"robots": null,
"dom_hash": -1168966177,
"components_hash": -507883130,
"host": "77.241.196.163",
"securitytxt_hash": null,
"server": "Kestrel",
"headers": {
"date": "Fri, 02 Oct 2026 11:27:56 GMT",
"transfer-encoding": "chunked",
"content-type": "text/html; charset=utf-8",
"server": "Kestrel"
},
"components": {
"jQuery": {
"categories": [
"JavaScript libraries"
]
},
"Twitter typeahead.js": {
"categories": [
"JavaScript libraries"
]
},
"Microsoft ASP.NET": {
"categories": [
"Web frameworks"
]
},
"SignalR": {
"categories": [
"JavaScript libraries"
]
},
"Bootstrap": {
"categories": [
"UI frameworks"
]
},
"Moment.js": {
"categories": [
"JavaScript libraries"
]
},
"Kestrel": {
"categories": [
"Web servers"
]
},
"Popper": {
"categories": [
"Miscellaneous"
]
},
"Blazor": {
"categories": [
"Web frameworks"
]
},
"D3": {
"categories": [
"JavaScript graphics"
]
}
},
"sitemap": null
},
"port": 7443,
"transport": "tcp",
"cpe23_hash": 656349812,
"location": {
"city": "Vilnius",
"region_code": "VL",
"area_code": null,
"longitude": 25.2798,
"latitude": 54.68916,
"country_code": "LT",
"country_name": "Lithuania"
},
"product": "Covenant",
"hash": -1538564608,
"tags": [
"c2",
"self-signed"
],
"timestamp": "2026-10-02T11:27:57.244317",
"ssl": {
"chain_sha256": [
"bf0ddd895bb368a8ed0f2673bf532860782dd50db5b8f704c48e04eb7b816449"
],
"jarm": "21d14d00000000000021d14d21d21d16c46827964490e6024618c0a3d7d893",
"tlsext": [
{
"id": 65281,
"name": "renegotiation_info"
},
{
"id": 11,
"name": "ec_point_formats"
},
{
"id": 35,
"name": "session_ticket"
},
{
"id": 23,
"name": "extended_master_secret"
}
],
"chain": [
"-----BEGIN CERTIFICATE-----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\nxAD75nWuH7S3Ot+hCG4XiRJm\n-----END CERTIFICATE-----\n"
],
"versions": [],
"acceptable_cas": [],
"alpn": [],
"cert": {
"sig_alg": "sha256WithRSAEncryption",
"issued": "20260928053952Z",
"expires": "20360926053952Z",
"pubkey": {
"bits": 2048,
"type": "rsa"
},
"version": 2,
"extensions": [
{
"data": "\\x03\\x02\\x04\\xb0",
"name": "keyUsage"
},
{
"data": "0\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01",
"name": "extendedKeyUsage"
},
{
"data": "0\\x06\\x87\\x04\\x00\\x00\\x00\\x00",
"name": "subjectAltName"
}
],
"fingerprint": {
"sha256": "bf0ddd895bb368a8ed0f2673bf532860782dd50db5b8f704c48e04eb7b816449",
"sha1": "621ffbf464c7131ff2e1b8ba08394d9e03494671"
},
"serial": 11467818489011732000,
"issuer": {
"CN": "Covenant"
},
"expired": false,
"subject": {
"CN": "Covenant"
}
},
"cipher": {
"version": "TLSv1.2",
"bits": 256,
"name": "ECDHE-RSA-AES256-GCM-SHA384"
},
"trust": {
"revoked": false,
"browser": null
},
"handshake_states": [
"before SSL initialization",
"SSLv3/TLS write client hello",
"SSLv3/TLS read server hello",
"SSLv3/TLS read server certificate",
"SSLv3/TLS read server key exchange",
"SSLv3/TLS read server done",
"SSLv3/TLS write client key exchange",
"SSLv3/TLS write change cipher spec",
"SSLv3/TLS write finished",
"SSLv3/TLS read server session ticket",
"SSLv3/TLS read change cipher spec",
"SSLv3/TLS read finished",
"SSL negotiation finished successfully"
],
"ja3s": "ec74a5c51106f0419184d0dd08fb05bc",
"ocsp": {}
},
"hostnames": [
"chapel.warunghpjadul.com"
],
"org": "UAB \"Baltnetos komunikacijos\"",
"data": "HTTP/1.1 200 OK\r\nDate: Fri, 02 Oct 2026 11:27:56 GMT\r\nContent-Type: text/html; charset=utf-8\r\nServer: Kestrel\r\nTransfer-Encoding: chunked\r\n\r\n",
"asn": "AS15440",
"cpe23": [
"cpe:2.3:a:d3.js_project:d3.js",
"cpe:2.3:a:getbootstrap:bootstrap",
"cpe:2.3:a:jquery:jquery",
"cpe:2.3:a:microsoft:asp.net",
"cpe:2.3:a:momentjs:moment"
],
"isp": "Baltneta UAB \"Baltnetos komunikacijos\"",
"cpe": [
"cpe:/a:d3.js_project:d3.js",
"cpe:/a:getbootstrap:bootstrap",
"cpe:/a:jquery:jquery",
"cpe:/a:microsoft:asp.net",
"cpe:/a:momentjs:moment"
],
"domains": [
"warunghpjadul.com"
],
"ip_str": "77.241.196.163",
"os": null,
"_shodan": {
"region": "na",
"crawler": "667c9d6cc4bbbf0594c20c6f1ba56a8147913fd0",
"options": {},
"module": "https-simple-new",
"id": "2c84d3e9-abd4-49f1-8f6e-679a36b5cc5d"
}
}