Overview

URL195.229.97.119/webplus.exe?script=/../../../../etc/passwd2F..%2F..%2F
IP195.229.97.119
ASNAS5384 Emirates Telecommunications Corporation
Location United Arab Emirates
Report completed2017-05-16 17:29:55 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com No alerts detected
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on ASN: AS5384 Emirates Telecommunications Corporation

Date UQ / IDS / BL URL IP
2017-05-25 06:10:480 - 0 - 0www.zu.ac.ae/leadership2008/hashemi.html195.229.146.76
2017-05-25 01:14:070 - 0 - 2grandcontinentalhotel.ae/uploads5.195.192.66
2017-05-23 23:04:570 - 0 - 1micr.ae/images/thumbs/logo.gif?1f4cc=1282040194.170.187.51
2017-05-23 22:59:540 - 0 - 2grandcontinentalhotel.ae/uploads5.195.192.66
2017-05-23 13:47:320 - 0 - 0194.170.244.161194.170.244.161
2017-05-23 09:56:200 - 0 - 10reds.ae/86.96.205.100



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (2)


Request Response
GET /webplus.exe?script=/../../../../etc/passwd2F..%2F..%2F HTTP/1.1

Host: 195.229.97.119

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 195.229.97.119
HTTP/1.0 302 Found
HTTP/1.0 302 Found
Location: https://195.229.97.119/webplus.exe?script=/../../../../etc/passwd2F..%2F..%2F
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
GET /webplus.exe?script=/../../../../etc/passwd2F..%2F..%2F HTTP/1.1

Host: 195.229.97.119

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive