| GET 195.181.169.152:8080/admin/ |  195.181.169.152 | 200 OK | 909 B |
URL User Request GET 195.181.169.152:8080/admin/ IP195.181.169.152:8080 ASN#60068 Datacamp Limited
File typeHTML document, ASCII text Hash855a8594a6c2b8363c8f671669c48c82 86d2b118329cf7b158d1c7a57477d79873236745 14d9d599b6def7a6cd597cb3ac92bded4d43a032e50471b8cf5117db8c85c601
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /admin/ HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 909
Server: Streamer 20.12
Content-Type: text/html
Pragma: no-cache
|
|
| GET 195.181.169.152:8080/flu/admin3/0.e4a4478f5b3d2ba0d405.css | 195.181.169.152 | 200 OK | 50 kB |
URL GET 195.181.169.152:8080/flu/admin3/0.e4a4478f5b3d2ba0d405.css IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
Hashd8a26037864d4171094737a319ce86c6 d8c3c3232fd099c2a6c2fba8d1990ea1205fdc85 976288090608d08786d27c452acb3c57384add77ea78db296aed628ccc4b09fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/0.e4a4478f5b3d2ba0d405.css HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 49969
Server: Streamer 20.12
Content-Type: text/css
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: d8c3c3232fd099c2a6c2fba8d1990ea1205fdc85
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/flu/admin3/vendors.a2b34a1b6fdbe589f359.js | 195.181.169.152 | 200 OK | 3.1 MB |
URL GET 195.181.169.152:8080/flu/admin3/vendors.a2b34a1b6fdbe589f359.js IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46942) Size3.1 MB (3059147 bytes) Hash9b4b7c5a14b174e03d3fab26a6b44902 fffc11ad09a4f46592b0a6a554009bcf69fff3d6 c543c7de16e1484ee4bdecdc35b4d41e062a5b9bf4095730007a60e2e4d28c53
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/vendors.a2b34a1b6fdbe589f359.js HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 3059147
Server: Streamer 20.12
Content-Type: application/javascript
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: fffc11ad09a4f46592b0a6a554009bcf69fff3d6
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/favicon.ico | 195.181.169.152 | 404 Not Found | 10 B |
URL GET 195.181.169.152:8080/favicon.ico IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
Hash7605968e79d0ca095ab1231486d2b814 a007b420d19ceefa840f0373e050e3b51a4ab480 493fda53120050f85836032324409be6c6484f90a0755ae0c6a673ba7626818b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:36 GMT
Content-Length: 10
Server: Streamer 20.12
|
|
| GET 195.181.169.152:8080/admin3/api/ui_settings | 195.181.169.152 | 200 OK | 206 kB |
URL GET 195.181.169.152:8080/admin3/api/ui_settings IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
Size206 kB (206463 bytes) Hash4536f00fda2ad4aa96c6e9debc114e11 0f399b4956c2929199c8fe2c38f80dea954966e6 aa3bcd36d4afc62f74cd02295cc9237b5c17af686ef90f938465847eeb0c3ded
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /admin3/api/ui_settings HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://195.181.169.152:8080/admin/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:36 GMT
Content-Length: 154083
Server: Streamer 20.12
X-Route-Time: 367
X-Run-Time: 13
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
Content-Encoding: gzip
Content-Type: application/json
|
|
| GET 195.181.169.152:8080/admin3/api/ui_settings | 195.181.169.152 | 200 OK | 206 kB |
URL GET 195.181.169.152:8080/admin3/api/ui_settings IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
Size206 kB (206463 bytes) Hash4536f00fda2ad4aa96c6e9debc114e11 0f399b4956c2929199c8fe2c38f80dea954966e6 aa3bcd36d4afc62f74cd02295cc9237b5c17af686ef90f938465847eeb0c3ded
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /admin3/api/ui_settings HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://195.181.169.152:8080/admin/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:37 GMT
Content-Length: 154083
Server: Streamer 20.12
X-Route-Time: 230
X-Run-Time: 10
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
Content-Encoding: gzip
Content-Type: application/json
|
|
| GET 195.181.169.152:8080/ | 195.181.169.152 | 302 Found | 909 B |
IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 17
Server: Streamer 20.12
Location: /admin/
|
|
| GET 195.181.169.152:8080/flu/admin3/2.a02f7ed8f45409b3ecef.css | 195.181.169.152 | 200 OK | 22 kB |
URL GET 195.181.169.152:8080/flu/admin3/2.a02f7ed8f45409b3ecef.css IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeASCII text, with very long lines (22498) Hashf5e71c89c2ea27553cbbe0609ae799a8 b8ed4001586f5b3ce2dc4784c16d467a04f4ee8b f4c0e7075ee2df0d153b8a47b55b3eef8ceeccd582d5ffb52cdcddc512f70730
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/2.a02f7ed8f45409b3ecef.css HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 22500
Server: Streamer 20.12
Content-Type: text/css
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: b8ed4001586f5b3ce2dc4784c16d467a04f4ee8b
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/flu/admin3/runtime.e0cdc6ad9ea76591d274.js | 195.181.169.152 | 200 OK | 2.3 kB |
URL GET 195.181.169.152:8080/flu/admin3/runtime.e0cdc6ad9ea76591d274.js IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeJavaScript source, ASCII text, with very long lines (2325), with no line terminators Hash714e6eae70d6edeed75ddb89364590fb d02e044f94d4b0130289b59c24ea780e842bf941 550609f40831c1186bd5b39a0b00613f38e9b8c84aa09aa3f8e68b84d9dadc24
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/runtime.e0cdc6ad9ea76591d274.js HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 2325
Server: Streamer 20.12
Content-Type: application/javascript
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: d02e044f94d4b0130289b59c24ea780e842bf941
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/flu/admin3/main.1cb8783afb8d94d00c93.js | 195.181.169.152 | 200 OK | 1.1 MB |
URL GET 195.181.169.152:8080/flu/admin3/main.1cb8783afb8d94d00c93.js IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size1.1 MB (1067100 bytes) Hashb42d2a0d0f1557765863b2cac9d5d008 899e2f9e741de0cdbad8c1e942bf7703d062a13b b0b97916a8ab700503c38a63cd5e77732b3549c1014143ff38ed8752b349e3f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/main.1cb8783afb8d94d00c93.js HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:34 GMT
Content-Length: 1067100
Server: Streamer 20.12
Content-Type: application/javascript
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: 899e2f9e741de0cdbad8c1e942bf7703d062a13b
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/flu/admin3/3.c17365b4d63d19d45fa0.js | 195.181.169.152 | 200 OK | 48 kB |
URL GET 195.181.169.152:8080/flu/admin3/3.c17365b4d63d19d45fa0.js IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeUnicode text, UTF-8 text, with very long lines (47747), with no line terminators Hash09c167bb590d1ad403b56bd013fc55d7 b80b02264d2f55e8e6cb492ee58a75f11142fbcf 85af4eb63bdd883d847555c45f5f4a260ae6fa6bc08c62ed3baaa84eec9fa079
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flu/admin3/3.c17365b4d63d19d45fa0.js HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://195.181.169.152:8080/admin/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:37 GMT
Content-Length: 47763
Server: Streamer 20.12
Content-Type: application/javascript
Last-Modified: Tue, 01 Dec 2020 22:16:32 GMT
Etag: 002896c3b831338f858b976ad53f4545141e0881
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
|
|
| GET 195.181.169.152:8080/flussonic/api/server | 195.181.169.152 | 403 Forbidden | 1.1 kB |
URL GET 195.181.169.152:8080/flussonic/api/server IP195.181.169.152:8080 ASN#60068 Datacamp Limited
Requested byhttp://195.181.169.152:8080/admin/
File typeHTML document, ASCII text Hash6d3c09bd749f73a470e74e55cf8506eb ff434da9a713e4cc7f58a2901d080468324e066d 3a57e25822748ef4b215231d4d371c154dc77ca28cb86f5dfc1b6cf37dcd8537
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flussonic/api/server HTTP/1.1
Host: 195.181.169.152:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://195.181.169.152:8080/admin/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Connection: keep-alive
Date: Tue, 10 Jun 2025 21:19:37 GMT
Content-Length: 1147
Server: Streamer 20.12
X-Route-Time: 251
X-Run-Time: 299
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, DELETE, OPTIONS
Access-Control-Expose-Headers: Server, range, X-Run-Time, Content-Length, Location
Access-Control-Allow-Headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range
X-Deny-Reason: Auth denied
|
|