Overview

URL schwaben-geissboecke.de/
IP92.51.180.171
ASNAS20773 Host Europe GmbH
Location Germany
Report completed2018-08-16 06:17:43 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-08-16 06:17:15 CEST 1  92.51.180.171 Client IP ET INFO Possible Phish - Mirrored Website Comment Observed


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 92.51.180.171

Date UQ / IDS / BL URL IP
2018-11-18 13:57:30 +0100
0 - 0 - 1 autodiscover.data-tax.de/ 92.51.180.171
2018-11-18 11:21:54 +0100
0 - 0 - 1 autodiscover.gzp-legal.de/ 92.51.180.171
2018-11-18 08:10:21 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-17 00:32:57 +0100
0 - 0 - 1 autodiscover.gzp-legal.de/ 92.51.180.171
2018-11-16 21:27:44 +0100
0 - 3 - 0 torspielertrainer.de/ 92.51.180.171
2018-11-16 01:43:35 +0100
0 - 0 - 1 autodiscover.gzp-legal.de/ 92.51.180.171
2018-11-15 23:24:02 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-13 20:48:55 +0100
0 - 0 - 1 autodiscover.data-tax.de/ 92.51.180.171
2018-11-13 15:39:57 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-12 13:36:33 +0100
0 - 0 - 1 autodiscover.gzp-legal.de/ 92.51.180.171

Last 10 reports on ASN: AS20773 Host Europe GmbH

Date UQ / IDS / BL URL IP
2018-11-19 06:47:53 +0100
0 - 0 - 1 https://www.dellen-technik.de/web/2 5.175.14.26
2018-11-19 05:03:49 +0100
0 - 0 - 3 hundesalonblacky.de/jtyoawi/sotpie/543/kingof (...) 46.163.78.246
2018-11-19 02:18:19 +0100
0 - 0 - 1 polibotra.com/ 83.169.34.204
2018-11-19 00:26:45 +0100
0 - 0 - 2 lvps5-35-240-246.dedicated.hosteurope.de/ 5.35.240.246
2018-11-18 22:05:08 +0100
0 - 2 - 0 hainaut.frcspb.be/ 46.163.115.151
2018-11-18 21:17:28 +0100
0 - 0 - 1 grizzlystyle.de/ 46.163.75.174
2018-11-18 21:09:13 +0100
2 - 1 - 11 www.fishinglakesuk.co.uk/lake/356/heronbrook_ (...) 92.51.134.247
2018-11-18 20:48:22 +0100
0 - 0 - 3 hundesalonblacky.de/jtyoawi/sotpie/543/kingof (...) 46.163.78.246
2018-11-18 19:59:46 +0100
0 - 0 - 3 hundesalonblacky.de/jtyoawi/sotpie/543/kingof (...) 46.163.78.246
2018-11-18 18:26:23 +0100
1 - 0 - 0 designa.city-parking.eu/ 92.51.164.97

Last 10 reports on domain: schwaben-geissboecke.de

Date UQ / IDS / BL URL IP
2018-11-18 08:10:21 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-15 23:24:02 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-13 15:39:57 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-11-12 11:41:40 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-10-22 07:23:31 +0200
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-10-21 07:06:11 +0200
0 - 1 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-09-01 16:26:01 +0200
0 - 1 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-08-23 16:00:57 +0200
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-08-19 07:01:49 +0200
0 - 2 - 0 schwaben-geissboecke.de/ 92.51.180.171
2018-08-15 17:38:58 +0200
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (10)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 16 Aug 2018 04:17:10 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:17 GMT
Etag: "71e-4f8b8e6d17440-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 890
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   890
Md5:    f36f4d66a53d50634699003c535e0b11
Sha1:   0e3fb29b2518e571e58d740b22856634d9364900
Sha256: 9304d4bf7887dacb4ec5fd70daad9fc948ec806dd2fdd7d27cda2c20877cf6d1
                                        
                                            GET /html/start.html HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 16 Aug 2018 04:17:10 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:35 GMT
Etag: "562-4f8b8e7e41cc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 733
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   733
Md5:    52231b63b2fb76288263da26549eec81
Sha1:   a5ed7970c16cc09a8b066fa8708b1ee67fb239bf
Sha256: 1c0ef313d420c50382f9f4ac294bf2d40035a2bd419f04a70086887f8881e95b
                                        
                                            GET /html/style_start.css HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/start.html

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 16 Aug 2018 04:17:11 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:36 GMT
Etag: "10e-4f8b8e7f35f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 174
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   174
Md5:    c25dbadf8d86292a2b0bd72ec03e2aff
Sha1:   e3c1324c235893f59009f20567e738e3c6174819
Sha256: d89d032097a321b8c559fb9172ba32b412e1c4d1ed6a69233bb90bd2d2422c68
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 16 Aug 2018 04:17:11 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:16 GMT
Etag: "57e-4f8b8e6c23200"
Accept-Ranges: bytes
Content-Length: 1406
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    82501484f545fe1f4e61615c99b2400d
Sha1:   c8d537230b92198e2feb16c5c8118a745c95f710
Sha256: 7757da39834b31e8bf646e7de39eaede71a62ba652f0b17648dc252afcb7ba9a
                                        
                                            GET /html/pix/logo_k.gif HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/start.html

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 16 Aug 2018 04:17:11 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:55 GMT
Etag: "7479-4f8b8e91549c0"
Accept-Ranges: bytes
Content-Length: 29817
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 353 x 400
Size:   29817
Md5:    4adc00cd3fe30cbf8bf6ab4aa09c1839
Sha1:   20411b0bd4c7f655d2d50b2c632f79c233da957a
Sha256: a30417792255499a8b6419621e768a4fcfbecd698c7b332855325f184bd4e7af
                                        
                                            GET /html/pix/fellmuster.jpg HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/start.html

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 16 Aug 2018 04:17:11 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:54 GMT
Etag: "a11c-4f8b8e9060780"
Accept-Ranges: bytes
Content-Length: 41244
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   41244
Md5:    55ef9dbe6c06f470d604d3de8622a972
Sha1:   190ebef96408754ae62f16c56c5dc1d55881b68d
Sha256: 7cbaa71b383f44edffc5aa652be7f5cc7b7f868deeb59bbb2e2d35c9a1bc11a9
                                        
                                            GET /html/ueberuns.html HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 16 Aug 2018 04:17:14 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:37 GMT
Etag: "993-4f8b8e802a140-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 991
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   991
Md5:    18fd81de0695c393522218f5fe294263
Sha1:   1601f1e3c921f5a9142ddcfd223860431b03602a
Sha256: 70b854787f2159228641c9cab49a35c42c1265b94f7f50d173154a9ab9049a62

Alerts:
  IDS:
    - ET INFO Possible Phish - Mirrored Website Comment Observed
                                        
                                            GET /html/style.css HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/ueberuns.html

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 16 Aug 2018 04:17:14 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:35 GMT
Etag: "7fc-4f8b8e7e41cc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 601
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   601
Md5:    c3b12b6adf80a329f8092f05ea45d336
Sha1:   c255c90ff32009769e5af67a14ec4810c96fd0f8
Sha256: 04906edded8a9deca40f21da6c04a4df0d2d8414ff7398c122291213b2acf01e
                                        
                                            GET /html/pix/bullet.gif HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/style.css

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 16 Aug 2018 04:17:15 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:53 GMT
Etag: "3b-4f8b8e8f6c540"
Accept-Ranges: bytes
Content-Length: 59
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 16
Size:   59
Md5:    57eae684b9a732152a64100470818ad7
Sha1:   dd3235151630850c3c0b87386047ed8a4f9806b3
Sha256: 52b22b100d0974df57f38db6ec136d8b0d6a1ab9baadc005dca2025aa9e09e54
                                        
                                            GET /html/pix/banner.jpg HTTP/1.1 
Host: schwaben-geissboecke.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://schwaben-geissboecke.de/html/ueberuns.html

                                         
                                         92.51.180.171
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 16 Aug 2018 04:17:14 GMT
Server: Apache
Last-Modified: Tue, 06 May 2014 10:42:53 GMT
Etag: "8995-4f8b8e8f6c540"
Accept-Ranges: bytes
Content-Length: 35221
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   35221
Md5:    90bbe3596e661a0545d0f08e97c8da1c
Sha1:   6bbbc527f8188381aeae9f9cfda280afe1faaab5
Sha256: e05f63acec5d0ca6f2832955f1437dd1d38571365d1c0db070929620fd8e5011