Overview

URLhttp://couponcp-a.akamaihd.net/items/it/swf/f.swf
IP80.239.148.225
ASNAS1299 TeliaNet Global Network
Location Europe
Report completed2013-02-15 02:01:22 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2013-02-15 02:00:45 80.239.148.225 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 80.239.148.225

Date Alerts / IDS URL IP
2013-02-11 16:24:440 / 1http://apnwidgets.ask.com/widget/everest/weather/1/background.html?lang=en&locale (...)80.239.148.225
2013-02-11 15:22:160 / 2http://www.tomshardware.com/forum/40630-63-uninstall-program-control-panel-cleaner80.239.148.225
2013-02-08 00:33:380 / 3http://www.tomshardware.com/forum/245214-49-eset-avast80.239.148.225
2013-02-06 11:13:420 / 4http://as.casalemedia.com/sd?s=95331&f=180.239.148.225
2013-02-05 08:45:150 / 0http://amifree.barnesandnoble.com80.239.148.225
2013-01-29 01:51:020 / 1http://www.cacadoresdebruxasofilme.com.br/80.239.148.225

Last 6 reports on ASN: AS1299 TeliaNet Global Network

Date Alerts / IDS URL IP
2013-02-14 22:17:470 / 0http://w.sharethis.com/share4x/js/st.de780fdbb4d37448fa11986f0bc07553.js80.239.148.226
2013-02-14 21:49:260 / 0http://209.170.97.239/logs/0106710a9243449ab60fd0cb8bed3456.log209.170.97.239
2013-02-14 21:18:240 / 2http://oversight.house.gov/hearing/unintended-consequences-is-government-effectively-addressing (...)23.32.87.91
2013-02-14 19:05:060 / 0http://flash.scrippsnetworks.com:443/fcs/ident2217.212.252.220
2013-02-14 17:58:170 / 0http://cp98516.edgefcs.net217.212.252.204
2013-02-14 17:57:100 / 0http://cp98516.edgefcs.net/crossdomain.xml217.212.252.206



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
GET /items/it/swf/f.swf HTTP/1.1

Host: couponcp-a.akamaihd.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
x-amz-id-2: lzNqmZt0SlkhgCkUVSmWzwsf+k7RKwChMz/VKh4EbEQYtAR33Gju4eOEh8s3j/ol
x-amz-request-id: 7F6A0BAA6EA9F241
Last-Modified: Wed, 19 Dec 2012 19:28:52 GMT
Etag: "9676235fea6700f162ace42cd4096ede"
Accept-Ranges: bytes
Content-Length: 1559
Server: AmazonS3
Date: Fri, 15 Feb 2013 01:00:44 GMT
Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Mon, 11 Feb 2013 19:46:38 GMT
Etag: "66fd38-4b6-4d5782ad16380"
Accept-Ranges: bytes
Content-Length: 1206
Date: Fri, 15 Feb 2013 01:00:45 GMT
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: couponcp-a.akamaihd.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 403 Forbidden

Content-Type: application/xml
x-amz-request-id: 1581597570D00E51
x-amz-id-2: ekS3L/ogDv3RHUNNrinUElRFj4WC2V6vFBkh55fHam3EKywmbW4j9x7XAHBuNRay
Server: AmazonS3
Date: Fri, 15 Feb 2013 01:00:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
GET /favicon.ico HTTP/1.1

Host: couponcp-a.akamaihd.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 403 Forbidden

Content-Type: application/xml
x-amz-request-id: B905F40B20B34728
x-amz-id-2: TYQLGk84/sWr/pTNAb9Rbxo1SXA620MizzRA6tN6u9aNKl8+u5itFEzaD9hEwwYR
Server: AmazonS3
Date: Fri, 15 Feb 2013 01:00:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding