Overview

URL sbb1.net/Music/UploadFiles_5786/201202/2012022314061181.doc
IP23.88.72.103
ASNAS18978 Enzu Inc
Location United States
Report completed2019-03-26 04:38:00 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-26 2 sbb1.net/Music/UploadFiles_5786/201202/2012022314061181.doc Malware
2019-03-26 2 www.sbb1.net/?route=/Music/UploadFiles_5786/201202/2012022314061181.doc Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 23.88.72.103

Date UQ / IDS / BL URL IP
2019-04-18 20:08:42 +0200
0 - 0 - 5 sbb1.net/Article/xgzx/201704/20170413134855.html 23.88.72.103
2019-03-27 04:43:07 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200911/200911030 (...) 23.88.72.103
2019-03-26 19:04:41 +0100
0 - 0 - 1 www.sbb1.net/Article/info/201510/201510231059 (...) 23.88.72.103
2019-03-26 04:25:50 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-26 04:25:50 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-26 04:25:48 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-24 04:16:02 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200903/200903171 (...) 23.88.72.103
2019-03-22 05:59:54 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200911/200911030 (...) 23.88.72.103
2019-03-21 05:17:44 +0100
0 - 0 - 2 sbb1.net/Music/UploadFiles_5786/201202/201202 (...) 23.88.72.103
2019-03-20 23:29:55 +0100
0 - 3 - 6 sbb1.net/index.html 23.88.72.103

Last 10 reports on ASN: AS18978 Enzu Inc

Date UQ / IDS / BL URL IP
2019-04-19 20:32:03 +0200
0 - 0 - 1 huntindonlighting.com/shtml/1453-82-3.htm 23.244.247.69
2019-04-19 17:30:29 +0200
0 - 0 - 2 www.haojiedq.com/?route=/news/229325.html 104.151.154.201
2019-04-19 16:01:59 +0200
0 - 0 - 1 www.yhucn.cn/xxx.exe 104.202.222.96
2019-04-19 16:01:55 +0200
0 - 0 - 2 yhucn.cn/xxx.exe 104.202.222.96
2019-04-19 15:03:27 +0200
0 - 0 - 1 entina.cn/meiwenshangxi/chahualei/1423.html 23.245.102.230
2019-04-19 14:52:05 +0200
0 - 0 - 1 hl.csgttz.com/ 172.246.23.234
2019-04-19 14:44:46 +0200
0 - 0 - 1 136kao.com/list/index29.html 23.244.103.34
2019-04-19 14:38:36 +0200
0 - 0 - 1 smxjzfw.com/zxns/430.html 107.183.84.252
2019-04-19 11:57:01 +0200
0 - 0 - 2 753xb.com/view/index42074.html 172.246.200.51
2019-04-19 11:52:08 +0200
0 - 0 - 2 81lu.info/view/index28574.html 23.88.20.21

Last 10 reports on domain: sbb1.net

Date UQ / IDS / BL URL IP
2019-04-18 20:08:42 +0200
0 - 0 - 5 sbb1.net/Article/xgzx/201704/20170413134855.html 23.88.72.103
2019-03-27 04:43:07 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200911/200911030 (...) 23.88.72.103
2019-03-26 19:04:41 +0100
0 - 0 - 1 www.sbb1.net/Article/info/201510/201510231059 (...) 23.88.72.103
2019-03-26 04:25:50 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-26 04:25:50 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-26 04:25:48 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/201407/201407071 (...) 23.88.72.103
2019-03-24 04:16:02 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200903/200903171 (...) 23.88.72.103
2019-03-22 05:59:54 +0100
0 - 0 - 2 sbb1.net/Article/UploadFiles/200911/200911030 (...) 23.88.72.103
2019-03-21 05:17:44 +0100
0 - 0 - 2 sbb1.net/Music/UploadFiles_5786/201202/201202 (...) 23.88.72.103
2019-03-20 23:29:55 +0100
0 - 3 - 6 sbb1.net/index.html 23.88.72.103


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET /Music/UploadFiles_5786/201202/2012022314061181.doc HTTP/1.1 
Host: sbb1.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         23.88.72.103
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 26 Mar 2019 03:56:33 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.sbb1.net/?route=/Music/UploadFiles_5786/201202/2012022314061181.doc


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /?route=/Music/UploadFiles_5786/201202/2012022314061181.doc HTTP/1.1 
Host: www.sbb1.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         23.88.72.103
HTTP/1.1 200 OK
Content-Type: text/html;charset=gb2312
                                        
Server: nginx
Date: Tue, 26 Mar 2019 03:56:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11294
Md5:    dfacce2a530b4d621f00b51cbfe9f39b
Sha1:   e85754498c5a3024742c88bc47ca0170ea9a6834
Sha256: b6313a14abc4d1beebcfb03e3717d7e55f4cb7bddc545150b95c373acb97bbc5

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.sbb1.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         23.88.72.103
HTTP/1.1 200 OK
Content-Type: text/html;charset=gb2312
                                        
Server: nginx
Date: Tue, 26 Mar 2019 03:56:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1905
Md5:    c6aa93abfe8a6148cc59f271a44dc626
Sha1:   4c5ee858e531acd260fdd67ad1a4b85940f61241
Sha256: 91df4a9daff4bdd7885f76085aceab532cd9ffdb205f3a20adb7c014fc9f6e5d
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.sbb1.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         23.88.72.103
HTTP/1.1 200 OK
Content-Type: text/html;charset=gb2312
                                        
Server: nginx
Date: Tue, 26 Mar 2019 03:56:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1905
Md5:    c6aa93abfe8a6148cc59f271a44dc626
Sha1:   4c5ee858e531acd260fdd67ad1a4b85940f61241
Sha256: 91df4a9daff4bdd7885f76085aceab532cd9ffdb205f3a20adb7c014fc9f6e5d