| 103.135.220.181:8080/simona/login.php |  103.135.220.181 | | 71 B |
URL 103.135.220.181:8080/simona/login.php IP103.135.220.181:0 ASN#131111 PT Mora Telematika Indonesia
File typeHTML document, ASCII text, with no line terminators Hash55ce66b7d3c4edfbd1a8444b73cb8ce8 b9198b95084487669cfe881cd08df990f7b20a97 7f18374b209896955737539b4f38270922700a2fed0234fecce06952a847949e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/login.php HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:10 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
X-Powered-By: PHP/5.2.3
Set-Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 71
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
|
| 103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid | 103.135.220.181 | 200 OK | 4.2 kB |
URL User Request GET HTTP/1.1103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
File typeHTML document, ASCII text, with CRLF line terminators Hashfa982cff182c14786680b7ed74270419 60604021b0ac42d39791e472e96fddec98405150 6ee2718fa22aa8517f359a6d288d3ef968acf93bc29014e4716dc2a4b043c911
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/index.php?pesan=Password%20tidak%20valid HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/login.php
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:10 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
X-Powered-By: PHP/5.2.3
Content-Length: 4191
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
|
|
| 103.135.220.181:8080/simona/font-awesome/font-awesome.min.css | 103.135.220.181 | 200 OK | 31 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/font-awesome/font-awesome.min.css IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/font-awesome/font-awesome.min.css HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Thu, 18 Apr 2019 05:21:52 GMT
ETag: "436f1-7918-2e013c00"
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 103.135.220.181:8080/simona/css/googlefonts.css | 103.135.220.181 | 200 OK | 22 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/css/googlefonts.css IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeASCII text, with CRLF line terminators Hashdc7a17c62a0988f3502691701500f737 3de6b5151c3bf8b78321dc99aeffde43c4c523f0 8b182f79fa838bdfbe2dfa1191684ba233ca43359766f9882cbfbfc4098850e4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/css/googlefonts.css HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Wed, 14 Aug 2019 03:22:54 GMT
ETag: "436b1-55fd-45dc1eb8"
Accept-Ranges: bytes
Content-Length: 22013
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 103.135.220.181:8080/simona/assets/js/dashboard.js | 103.135.220.181 | 200 OK | 4.0 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/js/dashboard.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeASCII text, with CRLF line terminators Hash2b8bbd9a45171e15cdf109a8043b73e1 11d0baeddc41a7f13c591f182a3acfda6d0d95a4 bd5783fbb88ee1dd3eeae88452b09e44cf1817367740627aa0c39391787f0c28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/js/dashboard.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 20 Oct 2020 08:46:44 GMT
ETag: "4365e-f85-4547ffed"
Accept-Ranges: bytes
Content-Length: 3973
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/plugins/charts-c3/plugin.css | 103.135.220.181 | 200 OK | 3.5 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/plugins/charts-c3/plugin.css IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typetroff or preprocessor input, ASCII text, with CRLF line terminators Hash16bde74d7acd63faf2ec82896b68c14d 5ef22abb94337ffaa302d6c9e6446e9815563069 6205fca2eb356e08c588655d03593688fcea869ed05b05ab53a702b2151021bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/plugins/charts-c3/plugin.css HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Mon, 01 Feb 2021 02:31:18 GMT
ETag: "43677-d81-261de010"
Accept-Ranges: bytes
Content-Length: 3457
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 103.135.220.181:8080/simona/assets/plugins/charts-c3/plugin.js | 103.135.220.181 | 200 OK | 219 B |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/plugins/charts-c3/plugin.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Hash166af7276979213854405ca729739cdc ff282d285fdaf2a2d5aa3969092c640da383bffd 69985d5f51ce1dd5504bc534c3de34cc93e2ffa684f0842856bdae1ed016a61b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/plugins/charts-c3/plugin.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "43678-db-b5a97580"
Accept-Ranges: bytes
Content-Length: 219
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/js/require.min.js | 103.135.220.181 | 200 OK | 18 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/js/require.min.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeJavaScript source, ASCII text, with very long lines (17536) Hashbebd45d1f406bbe61424136b03e50895 aef4398890ee4c7be7357c27a62a222db3a570b7 55723e64f42b1751419803799a21651fdcfa9fb1df025344a07f5b619fc09155
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/js/require.min.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "43660-454a-b5a97580"
Accept-Ranges: bytes
Content-Length: 17738
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/plugins/maps-google/plugin.css | 103.135.220.181 | 200 OK | 0 B |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/plugins/maps-google/plugin.css IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/plugins/maps-google/plugin.css HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "436a1-0-b5a97580"
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 103.135.220.181:8080/simona/assets/plugins/input-mask/plugin.js | 103.135.220.181 | 200 OK | 168 B |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/plugins/input-mask/plugin.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Hashbd9993f02b1a6ab782f574b89c737b70 a2e3994dc4e405f22863c0db8031b1226a598ab0 ec252baef73ea77d00e13fd999df01545eb48bcac3e2b01d796b9cf8f67d306b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/plugins/input-mask/plugin.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "4369d-a8-b5a97580"
Accept-Ranges: bytes
Content-Length: 168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/plugins/maps-google/plugin.js | 103.135.220.181 | 200 OK | 0 B |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/plugins/maps-google/plugin.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/plugins/maps-google/plugin.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "436a2-0-b5a97580"
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/css/dashboard.css | 103.135.220.181 | 200 OK | 365 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/css/dashboard.css IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeASCII text, with CRLF line terminators Size365 kB (365367 bytes) Hashe2f9233db8b706d8d8c89a7d804605a8 ab3a2dc67714b9bce0a0ca6ed0f3bcf766e3dc94 b394e1a547593762cf2bfcc0c9bfaaeb8741976c7cba2aa31fd373c0015f3aeb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/css/dashboard.css HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:11 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Wed, 15 Mar 2023 03:15:41 GMT
ETag: "434c8-59337-c257a333"
Accept-Ranges: bytes
Content-Length: 365367
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 103.135.220.181:8080/simona/favicon.ico | 103.135.220.181 | 200 OK | 1.2 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/favicon.ico IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash101fd53721f51fcab9a9a4418a63dcff 900c4a226555b7a461fd1e60129c348ef798739a 1790792988698acbdc805406a5c0b6dba95b375163af3e254810ba7f62824aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/favicon.ico HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Fri, 02 Jun 2023 02:26:45 GMT
ETag: "431af-47e-48c48767"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon
|
|
| 103.135.220.181:8080/simona/images2/kominfo.png | 103.135.220.181 | 200 OK | 15 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/images2/kominfo.png IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typePNG image data, 246 x 205, 8-bit/color RGBA, non-interlaced Hashcf2cc85d9ebf0522ab5f599dde663a7a ccf097baffe2f8214ba9c7eb3cf7bfa0a7524e23 6c721d271ec84a3620f385d8c94b5dd1157af163b5bad9ad428736263214dc1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/images2/kominfo.png HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 16 Mar 2021 02:26:58 GMT
ETag: "43783-3b26-19c11eca"
Accept-Ranges: bytes
Content-Length: 15142
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
|
| 103.135.220.181:8080/simona/images2/sirea_index.png | 103.135.220.181 | 200 OK | 18 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/images2/sirea_index.png IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typePNG image data, 562 x 206, 8-bit/color RGBA, non-interlaced Hashec1f8b1fd81eacafd866f7f845096d94 ef1e01f237bae2124470e7dd373cafecd8157427 db76ccc04e4cd4258eae9a66d72eebfcebf22003e7f0c57a7c58c460e81f1fb6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/images2/sirea_index.png HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Thu, 25 May 2023 07:32:21 GMT
ETag: "4379c-47b7-9ef3e54a"
Accept-Ranges: bytes
Content-Length: 18359
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| 103.135.220.181:8080/simona/css/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 103.135.220.181 | 200 OK | 16 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/css/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeWeb Open Font Format (Version 2), TrueType, length 16112, version 1.0 Hash899c8f78ce650d4009d42443897aa723 d2e2faa9780b7fca5a5cb20a853dd7df55b3101e a9950fa5ca9cf47072770900d259bcf6778aa1119652d2e706d5eb92df254199
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/css/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/css/googlefonts.css
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Fri, 09 Aug 2019 02:08:15 GMT
ETag: "436ae-3ef0-a5afc067"
Accept-Ranges: bytes
Content-Length: 16112
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/plain
|
|
| 103.135.220.181:8080/simona/css/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 | 103.135.220.181 | 200 OK | 16 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/css/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeWeb Open Font Format (Version 2), TrueType, length 15948, version 1.0 Hashc85615b296302af51e683eecb5e371d4 ff7c20b0947804c607759aa46eab666d94cf12ea efb3cdc5e4582fd67dffab6fc6e5062074ce3f8c51747346af944e97749dc309
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/css/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/css/googlefonts.css
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Fri, 09 Aug 2019 02:07:39 GMT
ETag: "436af-3e4c-a384bb50"
Accept-Ranges: bytes
Content-Length: 15948
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/plain
|
|
| 103.135.220.181:8080/simona/images2/login_bg.jpg | 103.135.220.181 | 200 OK | 206 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/images2/login_bg.jpg IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 1920x1200, components 3 Size206 kB (206379 bytes) Hashd7f249da7c4a93d3d45b2990f88bd2f9 16042dbc79d1247c5fe101563481bd272c5d7a69 ef594ff429d0b720c4643585a6c6f68344f31006ad7a5783effbe9abf5d91235
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/images2/login_bg.jpg HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Wed, 24 May 2023 14:16:46 GMT
ETag: "43787-3262b-276886e3"
Accept-Ranges: bytes
Content-Length: 206379
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 103.135.220.181:8080/simona/assets/js/vendors/jquery-3.2.1.min.js | 103.135.220.181 | 200 OK | 282 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/js/vendors/jquery-3.2.1.min.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeJavaScript source, ASCII text, with CRLF line terminators Size282 kB (282120 bytes) Hash34f72614a46d5f848bd428b8707d84d7 d80972bf92910558ae1305aeb8ad0101565c0bc1 a50c5b0648ea8f1b7bbaf4f9cbea64acbeb15c2a4b00008dad2d726333106229
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/js/vendors/jquery-3.2.1.min.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:14 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Mon, 08 Jul 2019 10:53:18 GMT
ETag: "43668-44e08-407d1932"
Accept-Ranges: bytes
Content-Length: 282120
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/js/vendors/bootstrap.bundle.min.js | 103.135.220.181 | 200 OK | 69 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/js/vendors/bootstrap.bundle.min.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeJavaScript source, ASCII text, with very long lines (65302) Hash82cc2ba87659bc7da2ccc1afc7b454f0 82dedbce4fcf4b923f9928fd83764877f54e107d ddc55d1be808bf768907263cc3a605126f5068867a3e86f6fbb859b1d3818d8a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/js/vendors/bootstrap.bundle.min.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:17 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "43662-10e93-b5a97580"
Accept-Ranges: bytes
Content-Length: 69267
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 103.135.220.181:8080/simona/assets/js/core.js | 103.135.220.181 | 200 OK | 2.6 kB |
URL GET HTTP/1.1103.135.220.181:8080/simona/assets/js/core.js IP103.135.220.181:8080 ASN#131111 PT Mora Telematika Indonesia
Requested byhttp://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
File typeJavaScript source, ASCII text Hashc08753edd4450410a98135c6385c034b 256e3176df1607ebe309a53bcd06d6712dd6ddc6 962a25277ac789b55993dd0d523eb80277c393dbc4ccb8d4849760f6b273d1ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /simona/assets/js/core.js HTTP/1.1
Host: 103.135.220.181:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.135.220.181:8080/simona/index.php?pesan=Password%20tidak%20valid
Cookie: PHPSESSID=beafc5c8302995de7794a5df817e7e95
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 10:13:18 GMT
Server: Apache/2.2.4 (Win32) PHP/5.2.3
Last-Modified: Tue, 10 Apr 2018 18:29:58 GMT
ETag: "4365d-a28-b5a97580"
Accept-Ranges: bytes
Content-Length: 2600
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|