IP 104.18.15.101:0
Hash a639b8e84f7d0a1cf6e602c5a8607d09
920d068ede689006865beda992f07121cb1af1fc
3109fc6a491dd9453199cf10f931e19403ca54b1f483051ce26f555e4afbf65f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 00:33:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Jun 2023 17:37:09 GMT
Expires: Thu, 08 Jun 2023 17:37:08 GMT
Etag: "920d068ede689006865beda992f07121cb1af1fc"
Cache-Control: max-age=579190,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d0b9b9c4ec41c0a-OSL
seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
176.74.27.100 4.7 kB URL User Request GET seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
IP 176.74.27.100:0
ASN #38719 Dreamscape Networks Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash 71537a7778519ce66c3df51481abe39a
e281d2c9bbca870f0ec1a21dd9b6eb4580205398
8fbd07b6ea96fa2992a4d098ef8129600791c7f8356179e4386fe78309a0b27a
NIDS Severity Alert suricata high ET MALWARE Possible MalDoc Payload Download Nov 11 2014
suricata medium ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
GET /application/controllers/admin/bin/bin3/bin.exe HTTP/1.1
Host: seaots.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 02 Jun 2023 00:33:57 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Vary: Accept-Encoding
Upgrade: h2,h2c
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Encoding: gzip
seaots.com.au/img-sys/server_misconfigured.png
176.74.27.100200 OK 3.2 kB URL GET HTTP/1.1 seaots.com.au/img-sys/server_misconfigured.png
IP 176.74.27.100:80
ASN #38719 Dreamscape Networks Limited
Requested by http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash f79adaf00f83dc9757086cdbe8645ff0
82f37b8be7668eab8e1a06de828cb336799c8134
944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f
GET /img-sys/server_misconfigured.png HTTP/1.1
Host: seaots.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jun 2023 00:33:57 GMT
Content-Type: image/png
Content-Length: 3164
Upgrade: h2,h2c
Last-Modified: Tue, 10 Apr 2018 18:26:57 GMT
Accept-Ranges: bytes
seaots.com.au/img-sys/powered_by_cpanel.svg
176.74.27.100200 OK 2.6 kB URL GET HTTP/1.1 seaots.com.au/img-sys/powered_by_cpanel.svg
IP 176.74.27.100:80
ASN #38719 Dreamscape Networks Limited
Requested by http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5616)
Hash c47b4b5200566a2a496a11ba472ec5da
3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c
179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9
GET /img-sys/powered_by_cpanel.svg HTTP/1.1
Host: seaots.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jun 2023 00:33:58 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Vary: Accept-Encoding
Upgrade: h2,h2c
Last-Modified: Tue, 10 Apr 2018 18:26:57 GMT
Content-Encoding: gzip
seaots.com.au/favicon.ico
176.74.27.100404 Not Found 4.7 kB URL GET HTTP/1.1 seaots.com.au/favicon.ico
IP 176.74.27.100:80
ASN #38719 Dreamscape Networks Limited
Requested by http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash f77283d8de0bdeea65ae393c272add55
b075f1a97243b1f61fb494cccc6b4638ad4b546e
2da1b3b56ac00d0111f8d5309483c858258198f6fc4b05dec8c18510fe1b59c0
GET /favicon.ico HTTP/1.1
Host: seaots.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seaots.com.au/application/controllers/admin/bin/bin3/bin.exe
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 02 Jun 2023 00:33:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Vary: Accept-Encoding
Upgrade: h2,h2c
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Encoding: gzip