Overview

URLhttp://www8.garmin.com/software/ANTAgent_233.exe
IP2.23.158.235
ASNAS1299 TeliaNet Global Network
Location Europe
Report completed2012-11-06 22:39:00 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 22:38:27 2.23.158.235 urlQuery Client3FILEMAGIC windows executable
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 22:38:27 2.23.158.235 urlQuery Client1FILE-IDENTIFY download of executable content - x-header
2012-11-06 22:38:27 2.23.158.235 urlQuery Client3FILE-IDENTIFY Portable Executable binary file magic detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 2.23.158.235

Date Alerts / IDS URL IP
2012-12-27 08:34:250 / 4http://www8.garmin.com/software/WebUpdater_WindowsXPSP3andnewer__256.exe2.23.158.235
2012-12-11 13:41:490 / 3http://www8.garmin.com/software/WebUpdater_WindowsXPSP3andnewer__256.exe2.23.158.235
2012-11-23 01:52:160 / 3http://www8.garmin.com/software/GarminMobilePC_50070.exe2.23.158.235
2012-11-16 22:24:260 / 3http://www8.garmin.com/software/USBDrivers_231.exe2.23.158.235
2012-11-14 04:30:460 / 3http://www8.garmin.com/software/BaseCamp_404.exe2.23.158.235
2012-11-05 21:49:460 / 3http://www8.garmin.com/software/BaseCamp_404.exe2.23.158.235

Last 6 reports on ASN: AS1299 TeliaNet Global Network

Date Alerts / IDS URL IP
2013-02-13 05:42:470 / 0http://tracking.olx.com80.239.148.211
2013-02-13 00:50:500 / 2http://marriott.com/23.32.100.83
2013-02-12 22:52:030 / 0http://rt.trafficfacts.com/tf.php?k=12847g476b4cfb98a4fe9c9d8c41d17650e4343d4d4787h10;c=s;v=523.13.32.21
2013-02-12 19:25:041 / 0http://www.kulisammler.de/links/index.htm80.239.175.168
2013-02-12 19:02:320 / 0http://213.248.112.144213.248.112.144
2013-02-12 17:37:490 / 1http://dea.freevideosdownloadforpc.com/download/video_downloader?line_item=6025612&banner=1 (...)80.239.148.209

Last 6 reports on domain: www8.garmin.com

Date Alerts / IDS URL IP
2013-01-06 23:46:530 / 3http://www8.garmin.com/software/USBDrivers_231.exe92.123.206.235
2013-01-01 22:22:110 / 3http://www8.garmin.com/software/USBDrivers_231.exe92.123.206.235
2012-12-29 16:44:140 / 3http://www8.garmin.com/software/TrainingCenter_365.exe92.123.206.235
2012-12-27 08:34:250 / 4http://www8.garmin.com/software/WebUpdater_WindowsXPSP3andnewer__256.exe2.23.158.235
2012-12-27 00:28:050 / 3http://www8.garmin.com/software/WebUpdater_WindowsXPSP3andnewer__256.exe92.123.206.235
2012-12-11 13:41:490 / 3http://www8.garmin.com/software/WebUpdater_WindowsXPSP3andnewer__256.exe2.23.158.235



JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response 
GET /software/ANTAgent_233.exe HTTP/1.1

Host: www8.garmin.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: application/x-msdos-program

Server: Apache
Last-Modified: Mon, 09 Apr 2012 20:47:14 GMT
Etag: "67601e-919bb8-4bd451c6ad880"
Accept-Ranges: bytes
Content-Length: 9542584
Date: Tue, 06 Nov 2012 21:38:27 GMT
Connection: keep-alive