Overview

URL mozektevidi.cz/down/angry_ip_scanner.zip
IP77.93.216.69
ASNAS24971 Master Internet s.r.o
Location Czech Republic
Report completed2018-09-21 00:28:21 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-09-21 2 mozektevidi.cz/down/angry_ip_scanner.zip Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 77.93.216.69

Date UQ / IDS / BL URL IP
2018-01-01 23:10:27 +0100
0 - 0 - 1 mozektevidi.cz/down/CwK_Exploite.zip 77.93.216.69
2018-01-01 23:09:52 +0100
0 - 0 - 1 mozektevidi.cz/down/angry_ip_scanner.zip 77.93.216.69
2018-01-01 23:09:34 +0100
0 - 0 - 1 mozektevidi.cz/down/netcat.zip 77.93.216.69

Last 10 reports on ASN: AS24971 Master Internet s.r.o

Date UQ / IDS / BL URL IP
2019-02-23 08:40:23 +0100
0 - 1 - 0 esea.hostuju.cz/images/br.gif?506d9=1317732 77.93.211.244
2019-02-23 04:20:11 +0100
0 - 0 - 2 krissak.sk/wp-includes/css/dropbox/index.php 178.238.47.69
2019-02-22 22:25:41 +0100
0 - 1 - 1 raffyori.com/cache/widgetkit/gallery/16/d/ind (...) 89.185.228.8
2019-02-22 22:23:50 +0100
0 - 0 - 1 https://www.aebnworld.com/98o7kj56h.exe 89.185.228.53
2019-02-22 22:23:39 +0100
0 - 0 - 2 aebnworld.com/98o7kj56h.exe 89.185.228.53
2019-02-22 19:33:57 +0100
0 - 0 - 1 kaputt.hostuju.cz/skills/VPN_Changer.exe 77.93.211.244
2019-02-22 13:10:59 +0100
0 - 1 - 0 systemexplorer.net/download/SystemExplorerSet (...) 83.167.234.14
2019-02-22 11:35:35 +0100
0 - 0 - 3 truthaboutheelpain.com/calc.exe 89.185.228.188
2019-02-21 00:31:33 +0100
0 - 1 - 0 files.easy2boot.com/200003509-5befd5ce8d/Easy (...) 178.238.47.167
2019-02-20 23:57:57 +0100
0 - 3 - 43 themetabolicfoundation.com/2017/09/08/septemb (...) 81.31.38.79

Last 3 reports on domain: mozektevidi.cz

Date UQ / IDS / BL URL IP
2018-01-01 23:10:27 +0100
0 - 0 - 1 mozektevidi.cz/down/CwK_Exploite.zip 77.93.216.69
2018-01-01 23:09:52 +0100
0 - 0 - 1 mozektevidi.cz/down/angry_ip_scanner.zip 77.93.216.69
2018-01-01 23:09:34 +0100
0 - 0 - 1 mozektevidi.cz/down/netcat.zip 77.93.216.69


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /down/angry_ip_scanner.zip HTTP/1.1 
Host: mozektevidi.cz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         77.93.216.69
HTTP/1.1 200 OK
Content-Type: application/zip
                                        
Date: Thu, 20 Sep 2018 22:27:48 GMT
Server: Apache/2.2.34 (Win64) mod_ssl/2.2.34 OpenSSL/1.0.2l PHP/5.2.8-x64
Last-Modified: Mon, 26 May 2008 18:07:22 GMT
Etag: "1a00000004708d-19ea5-44e260d15d6fc"
Accept-Ranges: bytes
Content-Length: 106149
Keep-Alive: timeout=4, max=80
Connection: Keep-Alive


--- Additional Info ---
Magic:  Zip archive data, at least v2.0 to extract
Size:   106149
Md5:    10942e41ffd7941c077b09396cacedce
Sha1:   f28c9fd2d93733a0f5807fa05588dc02046ecf70
Sha256: 367760eb81725912335fb4e377322bba6935bb537bcdc69f3037d652f40e2f74

Alerts:
  Blacklists:
    - fortinet: Malware