Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
78.153.140.96 | unknown | unknown | No data | No data | 389 B | 16 kB | 78.153.140.96 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-05-08 | medium | 78.153.140.96/tc.sh | Detects code found in report on exploits against CVE-2020-5902 F5 BIG-IP vulnerability by NCC group |
2024-05-08 | medium | 78.153.140.96/tc.sh | Linux.Trojan.Kinsing |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-05-08 | medium | 78.153.140.96 | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
78.153.140.96/tc.sh
IP
78.153.140.96
ASN
#202306 Hostglobal.plus Ltd
File type
Bourne-Again shell script, Unicode text, UTF-8 text executable, with very long lines (513)
Size
16 kB (15932 bytes)
Hash
1d8d4628f1b237e253d5f364aa3533fe
fc3d93e9dfc8e7473a9b7c52c8848624e8ffe919
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware | Detects code found in report on exploits against CVE-2020-5902 F5 BIG-IP vulnerability by NCC group |
Elastic Security YARA Rules | malware | Linux.Trojan.Kinsing |
JavaScript (0)
No Javascripts found
No Javascripts found
No Javascripts found
HTTP Transactions (1)
URL | IP | Response | Size | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
78.153.140.96/tc.sh | 78.153.140.96 | 200 OK | 16 kB | |||||||||||||
Detections
HTTP Headers
| ||||||||||||||||