Overview

URLhttp://whatsgoingon.pl/img/logo.gif?1945e=724626
IP79.96.20.210
ASNAS12824 home.pl sp. z o.o.
Location Poland
Report completed2012-10-30 16:13:26 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-10-30 16:12:53 79.96.20.210 urlQuery Client1ET TROJAN W32/Sality Executable Pack Digital Signature ASCII Marker
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-10-30 16:12:53 urlQuery Client 79.96.20.2101MALWARE-CNC Sality logo.gif URLs
2012-10-30 16:12:53 urlQuery Client 79.96.20.2101MALWARE-CNC Sality logo.gif URLs


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 79.96.20.210

Date Alerts / IDS URL IP
2013-02-13 19:28:190 / 1http://whatsgoingon.pl/img/logo.gif?201f1=92098379.96.20.210
2013-02-07 01:06:140 / 1http://whatsgoingon.pl/img/logo.gif?16f5d=84640579.96.20.210
2013-02-07 00:56:570 / 1http://whatsgoingon.pl/img/logo.gif?1f241=76531879.96.20.210
2013-02-07 00:43:440 / 1http://whatsgoingon.pl/img/logo.gif?1bc77=45513279.96.20.210
2013-02-07 00:34:540 / 1http://whatsgoingon.pl/img/logo.gif?25bf4=123689679.96.20.210
2013-02-07 00:33:470 / 1http://whatsgoingon.pl/img/logo.gif?13e9f=48940279.96.20.210

Last 6 reports on ASN: AS12824 home.pl sp. z o.o.

Date Alerts / IDS URL IP
2013-02-20 04:49:130 / 2http://fundacja-ftc.home.pl/details/Payment.zip?FZLyB72...89.161.232.11
2013-02-20 02:56:183 / 2http://www.naszogrod.com/79.96.71.244
2013-02-20 02:17:311 / 1http://dowcipy.smiletube.pl/1039/buciki89.161.232.42
2013-02-20 02:07:280 / 4http://ekoharpoon-systemy.pl/gap.php?q=actress-sukanya62.129.237.110
2013-02-20 01:05:071 / 2http://www.kedziora.pl/79.96.120.218
2013-02-20 01:03:441 / 2http://vipcar.org.pl/79.96.120.218

Last 6 reports on domain: whatsgoingon.pl

Date Alerts / IDS URL IP
2013-02-13 19:28:190 / 1http://whatsgoingon.pl/img/logo.gif?201f1=92098379.96.20.210
2013-02-07 01:06:140 / 1http://whatsgoingon.pl/img/logo.gif?16f5d=84640579.96.20.210
2013-02-07 00:56:570 / 1http://whatsgoingon.pl/img/logo.gif?1f241=76531879.96.20.210
2013-02-07 00:43:440 / 1http://whatsgoingon.pl/img/logo.gif?1bc77=45513279.96.20.210
2013-02-07 00:34:540 / 1http://whatsgoingon.pl/img/logo.gif?25bf4=123689679.96.20.210
2013-02-07 00:33:470 / 1http://whatsgoingon.pl/img/logo.gif?13e9f=48940279.96.20.210



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response 
GET /img/logo.gif?1945e=724626 HTTP/1.1

Host: whatsgoingon.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/gif

Connection: Keep-Alive
Content-Length: 12970
Date: Tue, 30 Oct 2012 15:12:53 GMT
Last-Modified: Fri, 07 Sep 2012 10:30:56 GMT
Server: IdeaWebServer/v0.80