URL User Request GET HTTP/1.1IP 160.124.119.71:80
ASN#132839 POWER LINE DATACENTER
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators Hasheb9627715477af1fed1cc11e21613400 a7dc5312abad04cbc1f1356b1d5d586d2774063e 6fca2042ca8606e1e43b58da784a58f89eb74337151c4b14a2eca3cef4461df2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO HUNTING HTTP 200 Stat Code with 404 in Body |
GET / HTTP/1.1
Host: 160.124.119.71
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Jun 2023 22:24:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
| 160.124.119.71/favicon.ico | 160.124.119.71 | 404 Not Found | 304 B |
URL GET HTTP/1.1160.124.119.71/favicon.ico IP160.124.119.71:80 ASN#132839 POWER LINE DATACENTER
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hasha4457d4defe8dd3748c8b468be6adfb3 40dfbffffec4effe493b30a5e6317f23d0978fa6 758cc1884ad669a17587cd545eb6446b8d0d762c2c7421ad6858d01ad3a46b81
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: 160.124.119.71
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.124.119.71/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 06 Jun 2023 22:24:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
| cdn.bootscdn.info/ajax/libs/jquery/3.6.1/jquery.js |  0.0.0.0 | | 0 B |
URL GET cdn.bootscdn.info/ajax/libs/jquery/3.6.1/jquery.js IP0.0.0.0:0
CertificateIssuerGoogle Trust Services LLC Subjectbootscdn.info Fingerprint4A:04:B1:D6:DA:59:79:0A:A0:FA:8C:A3:36:1A:06:7D:C2:4D:40:E7 ValidityWed, 26 Apr 2023 20:43:41 GMT - Tue, 25 Jul 2023 20:43:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajax/libs/jquery/3.6.1/jquery.js HTTP/1.1
Host: cdn.bootscdn.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://160.124.119.71/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 06 Jun 2023 22:24:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Tuesday, 06-Jun-2023 22:24:00 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0SdXAm3ORxBc0ynlSEv4%2B3BgXqw%2FLoFVTSUbqFisUdmagtpjaQA4LWzU4LQPvbRSTU%2B0DsDOyUQtVnS3QYzx366QZ7oxwHu41eQnEeeg8FlJNLyb2Pq98TcwEOEXNXque20nAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d341022aa19b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|