Overview

URL bpc-rennes.fr/
IP167.114.117.237
ASNAS16276 OVH SAS
Location Canada
Report completed2019-03-23 22:35:13 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-03-23 22:34:42 CET 1  167.114.117.237 Client IP ET WEB_CLIENT Possible HTTP 503 XSS Attempt (External Source)
2019-03-23 22:34:41 CET 1  167.114.117.237 Client IP ET WEB_CLIENT Possible HTTP 503 XSS Attempt (External Source)
2019-03-23 22:34:43 CET 2 Client IP  212.80.217.169 ET POLICY HTTP Request to a *.tk domain
2019-03-23 22:34:43 CET 2 Client IP  212.80.217.169 ET POLICY HTTP Request to a *.tk domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 167.114.117.237

Date UQ / IDS / BL URL IP
2019-06-10 21:57:35 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-10 06:29:29 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-09 22:06:43 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-09 19:07:52 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-07 19:27:48 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-07 07:30:54 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-06 23:55:55 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-04 16:39:58 +0200
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-06-04 09:08:43 +0200
0 - 0 - 2 ns511841.ip-167-114-117.net/ 167.114.117.237
2019-06-04 04:56:15 +0200
0 - 0 - 1 teambusiness35.com/ 167.114.117.237

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-07-01 07:47:12 +0200
0 - 0 - 0 https://www.munplanet.com/articles/arlo-camer (...) 158.69.39.233
2019-07-01 04:15:44 +0200
0 - 3 - 0 www.asind.ae/wp-content/uploads/2019/seconder (...) 5.39.72.197
2019-07-01 03:56:20 +0200
0 - 0 - 0 webcamsteen.com/16y4[CUSTOM_AFF 192.99.67.89
2019-07-01 02:43:31 +0200
0 - 0 - 0 167.114.144.169/Android/ 167.114.144.169
2019-06-30 21:34:01 +0200
0 - 0 - 0 streams.tvxweb.org 158.69.54.221
2019-06-30 21:30:47 +0200
0 - 0 - 0 source.magikserv.com 37.187.171.206
2019-06-30 20:09:51 +0200
0 - 0 - 0 www.kweeper.com/popcorn2kg/sentence/6382508 91.121.242.21
2019-06-30 18:49:10 +0200
0 - 0 - 0 www.ovh.com 198.27.92.1
2019-06-30 18:18:47 +0200
0 - 0 - 0 liczniki.org/hit.php?l=alltube&o=1 94.23.92.123
2019-06-30 18:11:40 +0200
0 - 0 - 0 hardrock.blogdns.org/ 91.121.69.126

Last 4 reports on domain: bpc-rennes.fr

Date UQ / IDS / BL URL IP
2019-03-28 22:34:38 +0100
0 - 3 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-24 20:34:58 +0100
0 - 1 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-24 18:34:47 +0100
0 - 1 - 0 bpc-rennes.fr/ 167.114.117.237
2019-03-21 00:35:18 +0100
0 - 3 - 0 bpc-rennes.fr/ 167.114.117.237


JavaScript

Executed Scripts (6)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (14)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         167.114.117.237
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:15 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.bpc-rennes.fr/
X-Powered-By: PleskLin


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET / HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         167.114.117.237
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.10
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Retry-After: 3600
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff”


--- Additional Info ---
Magic:  UTF-8 Unicode HTML document text
Size:   1365
Md5:    e39a0a3fe45d19e834c6ece63225dea5
Sha1:   b46de35748aa28ded6e1a0e41b4a823bf140b8a6
Sha256: 8954c6de4cfb960b3803ef05365c9a25fc833e441c26ab8dc7e09bc382397e6f

Alerts:
  IDS:
    - ET WEB_CLIENT Possible HTTP 503 XSS Attempt (External Source)
    - ET WEB_CLIENT Possible HTTP 503 XSS Attempt (External Source)
                                        
                                            GET /wp-content/plugins/wp-maintenance-mode/assets/css/style.min.css HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:17 GMT
Content-Length: 8498
Last-Modified: Wed, 11 Apr 2018 14:35:17 GMT
Connection: keep-alive
Etag: "5ace1d25-2132"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   8498
Md5:    4094f20707ae3823d73f17cef26b57a6
Sha1:   272996bce9df67a608c85eb060e11d6e1f333db7
Sha256: 8ff096820d3d91a265b388029f645a6c7dc352bde71f103c7387c2d41fec8110
                                        
                                            GET /wp-content/plugins/wp-maintenance-mode/assets/js/scripts.min.js HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:17 GMT
Content-Length: 1526
Last-Modified: Mon, 17 Sep 2018 11:42:54 GMT
Connection: keep-alive
Etag: "5b9f933e-5f6"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1526
Md5:    bde3d85c86271f6a225998ccdbf31434
Sha1:   d03359d0e5741e07989ca4dea59f57cb8190d50c
Sha256: 09b9031d8304457396e076cce2948dc7c38ae2a4558f2878369a0cb9c0600d81
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "C3E1D31927B35A6C5CBF11880B1BF0820E889551BBF81FF99A00C254D3454B1B"
Last-Modified: Fri, 22 Mar 2019 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43172
Expires: Sun, 24 Mar 2019 09:34:14 GMT
Date: Sat, 23 Mar 2019 21:34:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    d7ae3818a22ccfd1dda553583fa99a2b
Sha1:   c0609ef6bc488c01bc9f34073e80210682a63e54
Sha256: c3e1d31927b35a6c5cbf11880b1bf0820e889551bbf81ff99a00c254d3454b1b
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.26
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 20 Mar 2019 17:59:25 GMT
Etag: "587e23ec1cbfacd99cd26d18a05a23f59cc7c694"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=6380
Expires: Sat, 23 Mar 2019 23:21:02 GMT
Date: Sat, 23 Mar 2019 21:34:42 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    86d84589ca97d122dfe2bf5062c2ffee
Sha1:   587e23ec1cbfacd99cd26d18a05a23f59cc7c694
Sha256: aa4915b1f75d4d947befa05cb2e7fbe1b112933babf20ebd476cbd08a4fb9976
                                        
                                            GET /wp-includes/js/jquery/jquery.js HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:17 GMT
Content-Length: 97184
Last-Modified: Mon, 17 Sep 2018 11:42:54 GMT
Connection: keep-alive
Etag: "5b9f933e-17ba0"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   97184
Md5:    8610f03fe77640dee8c4cc924e060f12
Sha1:   076524186dbbdd4c41afbbd6b260d9e46a095811
Sha256: fc48d1d80ece71a79a7b39877f4104d49d3da6c3665cf6dc203000fb7df4447e
                                        
                                            GET /in2herg42t2?type=in2&frm=scr& HTTP/1.1 
Host: setforspecialdomain.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         176.123.9.52
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:34:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4024
Md5:    a9bb3c47f66138a99af31fb6c2882be1
Sha1:   0e8a6134e5561d86b3408e761d7552855ad42093
Sha256: 96c8c8b105a70d8e4fe498df7c40d814b160db6cb6e3721050d952d3734bf5c1
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.bpc-rennes.fr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: pp0000011=1

                                         
                                         167.114.117.237
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:41:17 GMT
Content-Length: 1406
Last-Modified: Sun, 26 Apr 2015 20:52:22 GMT
Connection: keep-alive
Etag: "553d5006-57e"
X-Powered-By: PleskLin
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    1b95dfbb473e2a8de3e6e9680fd9e63b
Sha1:   14746895b8b223d15807010abda6f772ab8abda1
Sha256: 7010bd789c87586c6543eb3376c92e52d153571b9dc05a528c00d0e2349c3c31
                                        
                                            GET /index/?4831537102803 HTTP/1.1 
Host: itercoup.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bpc-rennes.fr/

                                         
                                         212.80.217.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Sat, 23 Mar 2019 21:34:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Sat, 23 Mar 2019 21:34:43 GMT
Cache-Control: max-age=0
Pragma: no-cache
Set-Cookie: 00831=%7B%22streams%22%3A%7B%225234%22%3A1553376883%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553376883%7D%2C%22time%22%3A1553376883%7D; expires=Tue, 23-Apr-2019 21:34:43 GMT; Max-Age=2678400; path=/; domain=.itercoup.tk 00831=%7B%22streams%22%3A%7B%225234%22%3A1553376883%2C%221509%22%3A1553376883%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553376883%2C%22250%22%3A1553376883%7D%2C%22time%22%3A1553376883%7D; expires=Tue, 23-Apr-2019 21:34:43 GMT; Max-Age=2678400; path=/; domain=.itercoup.tk 00831=%7B%22streams%22%3A%7B%225234%22%3A1553376883%2C%221509%22%3A1553376883%2C%226979%22%3A1553376883%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553376883%2C%22250%22%3A1553376883%2C%22261%22%3A1553376883%7D%2C%22time%22%3A1553376883%7D; expires=Tue, 23-Apr-2019 21:34:43 GMT; Max-Age=2678400; path=/; domain=.itercoup.tk


--- Additional Info ---
Magic:  HTML document text
Size:   277
Md5:    1993d3edffe160f430cb7b978c87879a
Sha1:   f6d22519261741bd0dda22a6dca9e2b7683fe90f
Sha256: 3e4895dc1043ff9d623611014248530f1bd8f8bf7509872cc5962c9d8a787eee

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain
                                        
                                            GET /mblog/latestpost HTTP/1.1 
Host: mashina.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://itercoup.tk/index/?4831537102803

                                         
                                         89.108.105.13
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:37:16 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=3
X-Powered-By: PHP/5.4.45
X-Redirect-By: WordPress
Location: http://mashina.com/mblog/latestpost/


--- Additional Info ---
                                        
                                            GET /mblog/latestpost/ HTTP/1.1 
Host: mashina.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://itercoup.tk/index/?4831537102803

                                         
                                         89.108.105.13
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:37:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=3
X-Powered-By: PHP/5.4.45
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   213
Md5:    951e285b9a97fa40982c2b37571d9cd2
Sha1:   5b7d6ab2742995d49bf3a1bf521739018121925e
Sha256: 88f6432ad69c2ba421792b36afe54ec9fc7c93fb67c7aacc99c88116117c32a7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: mashina.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         89.108.105.13
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Sat, 23 Mar 2019 21:37:16 GMT
Content-Length: 5558
Connection: keep-alive
Keep-Alive: timeout=3
Last-Modified: Wed, 13 May 2015 16:24:16 GMT
Etag: "b82801-15b6-515f90ad4e39f"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 256-colors
Size:   5558
Md5:    c028c4822428e83a358c60a93ef65381
Sha1:   5bf4e81d7bd3cdec66d9fb5962d83446bd428102
Sha256: 7abda15c7f2a33108e2cf8941b785f5583d2f1be8640649e87358b22b2cc3fb0
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: itercoup.tk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 00831=%7B%22streams%22%3A%7B%225234%22%3A1553376883%2C%221509%22%3A1553376883%2C%226979%22%3A1553376883%7D%2C%22campaigns%22%3A%7B%22632%22%3A1553376883%2C%22250%22%3A1553376883%2C%22261%22%3A1553376883%7D%2C%22time%22%3A1553376883%7D

                                         
                                         212.80.217.169
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Sat, 23 Mar 2019 21:34:46 GMT
Content-Length: 169
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    389975d8d57ca94e672162998e06c017
Sha1:   510c51b5312030d6b14c649c19ef039aecc8d6b4
Sha256: c85357a07370a52790712227119a38aaaed7f997f12b91008cd4c0c76398c076

Alerts:
  IDS:
    - ET POLICY HTTP Request to a *.tk domain