| |  140.131.110.56 | | 28 kB |
IP140.131.110.56:0 ASN#17716 National Taiwan University
File typeHTML document, Unicode text, UTF-8 text, with very long lines (540), with CRLF line terminators Hash2622d951565a3fd2eb5a88f731ecdb89 ae5ecfa0ebe0d4b950d3d4c314127943b4b1e8ea e49a8670ff6297d1a401e54740908bd6ac8763fba352bbaf7ce95c250d4fa82b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, no-store
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 27608
|
|
| 140.131.110.56/Inc/stylec.css | 140.131.110.56 | 200 OK | 6.9 kB |
URL GET HTTP/1.1140.131.110.56/Inc/stylec.css IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeASCII text, with CRLF line terminators Hash391250dbbaf7d6962f09d08f65c5176a 9a794aaee5a6dca10348135ddb4b6867713844fb 8c143624667d1014098ea7599a105db255b8ffe533df9f588f1e2b293a3e826e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Inc/stylec.css HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 6924
|
|
| 140.131.110.56/Inc/buttonStyle.css | 140.131.110.56 | 200 OK | 3.0 kB |
URL GET HTTP/1.1140.131.110.56/Inc/buttonStyle.css IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash80d6a269116eabdd1163c045d18cfcaf 8bedbabb5852d17261f87e89aa8ca01c96d65907 2a30743d9f339d3ca06964cd35d628b6f24309e347a9cfacf37255b0e55083b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Inc/buttonStyle.css HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 2969
|
|
| 140.131.110.56/Inc/PubJScript.js?Version=20231210001542 | 140.131.110.56 | 200 OK | 51 kB |
URL GET HTTP/1.1140.131.110.56/Inc/PubJScript.js?Version=20231210001542 IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (355), with CRLF line terminators Hash080aa1801eceeb2e4f87a0d3bbe9dc78 86e09a1973afaf652d4f78cae538535b463c3b7f bad2303c65c588081481e9ba9b08540086d2d93a18c8b7e19f6985e5a9447fff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Inc/PubJScript.js?Version=20231210001542 HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 50811
|
|
| 140.131.110.56/ScriptResource.axd?d=t2neM84HumbSlTkuqzV6LPCIoeoIpqcQ1NbeHNWSh_lv-KSjR8Dg9J4JFP108ertmUqoco1vspB94QAsn2wJn7MGxQgkVqHm67JX9jjAM6gCraRfNjLsnjV6rbUQLhym2YkxrdjMBmWX6lORN8sHHg2&t=f2cd5c5 | 140.131.110.56 | 200 OK | 15 kB |
URL GET HTTP/1.1140.131.110.56/ScriptResource.axd?d=t2neM84HumbSlTkuqzV6LPCIoeoIpqcQ1NbeHNWSh_lv-KSjR8Dg9J4JFP108ertmUqoco1vspB94QAsn2wJn7MGxQgkVqHm67JX9jjAM6gCraRfNjLsnjV6rbUQLhym2YkxrdjMBmWX6lORN8sHHg2&t=f2cd5c5 IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashdb98acc766cd74fd43b53d04ba46b47c 7e77cc8ce2f5fbc12e07370199b5f9aa34a446c0 1d6c87925a3747fc79221548d5fdfdb4776d83fd20d0fca3caeea39372b12b4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ScriptResource.axd?d=t2neM84HumbSlTkuqzV6LPCIoeoIpqcQ1NbeHNWSh_lv-KSjR8Dg9J4JFP108ertmUqoco1vspB94QAsn2wJn7MGxQgkVqHm67JX9jjAM6gCraRfNjLsnjV6rbUQLhym2YkxrdjMBmWX6lORN8sHHg2&t=f2cd5c5 HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sun, 08 Dec 2024 14:18:40 GMT
Last-Modified: Sat, 09 Dec 2023 14:18:40 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 15230
|
|
| 140.131.110.56/WebResource.axd?d=Bm3tF4oIY91m1W_qtTJBeoKVeaYfiMCaKmfiSOgY-C6_2sKXGI0OYABRnwnuY1BDRRAdOL0d7GpNLSegEYCykK0Ia5rcEECz_VxUzGSr-Y01&t=637585781762593609 | 140.131.110.56 | 200 OK | 23 kB |
URL GET HTTP/1.1140.131.110.56/WebResource.axd?d=Bm3tF4oIY91m1W_qtTJBeoKVeaYfiMCaKmfiSOgY-C6_2sKXGI0OYABRnwnuY1BDRRAdOL0d7GpNLSegEYCykK0Ia5rcEECz_VxUzGSr-Y01&t=637585781762593609 IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeASCII text, with CRLF line terminators Hash90ea7274f19755002360945d54c2a0d7 647b5d8bf7d119a2c97895363a07a0c6eb8cd284 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /WebResource.axd?d=Bm3tF4oIY91m1W_qtTJBeoKVeaYfiMCaKmfiSOgY-C6_2sKXGI0OYABRnwnuY1BDRRAdOL0d7GpNLSegEYCykK0Ia5rcEECz_VxUzGSr-Y01&t=637585781762593609 HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Expires: Sun, 08 Dec 2024 14:18:40 GMT
Last-Modified: Sun, 06 Jun 2021 04:09:36 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 23063
|
|
| 140.131.110.56/images/log_hllogo.png | 140.131.110.56 | 200 OK | 2.4 kB |
URL GET HTTP/1.1140.131.110.56/images/log_hllogo.png IP140.131.110.56:80 ASN#17716 National Taiwan University
File typePNG image data, 41 x 43, 8-bit/color RGBA, non-interlaced Hash7dc794dd785ab21ca6527174cabcb86d ea82622087f6f6eadd4a06587aff57743d494b3d bab2ecc76fc56de58770a7625d65c348e2b035743518f4432be95bf19420cbab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_hllogo.png HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 2430
|
|
| 140.131.110.56/images/right_icon.gif | 140.131.110.56 | 200 OK | 48 B |
URL GET HTTP/1.1140.131.110.56/images/right_icon.gif IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeGIF image data, version 89a, 5 x 5 Hash87c6ec09e1d40b14e4c4e5e6cff2bf3f ede98b08609bd5cd903f02397adab522e794dd79 5895af142e98244046a28cda08b57767da2f37b536713a57f5ed135696e303f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/right_icon.gif HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 48
|
|
| 140.131.110.56/images/log_form_sha.png | 140.131.110.56 | 200 OK | 1.0 kB |
URL GET HTTP/1.1140.131.110.56/images/log_form_sha.png IP140.131.110.56:80 ASN#17716 National Taiwan University
File typePNG image data, 258 x 22, 8-bit/color RGBA, non-interlaced Hashad8a02dd299344db70df24bedd0e20dd a543dac18b2ca711447c15068c9f1d4cbf15d94b bd0bb7659e69190e2ccd90ccf597600fb30a0577c4419ebd55ff939e79f4b46c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_form_sha.png HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 1042
|
|
| 140.131.110.56/images/all_bg.gif | 140.131.110.56 | 200 OK | 864 B |
URL GET HTTP/1.1140.131.110.56/images/all_bg.gif IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeGIF image data, version 89a, 3 x 3000 Hashe1768d46bd75fd2d6d30dd34d7f755cb af70e9f50a398ea8cae730cfdeb052469d418a3c b5807632676e815cc1632b9a742a48b050477637ee22e8fec0caae715b41d0f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/all_bg.gif HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 864
|
|
| 140.131.110.56/ScriptResource.axd?d=dV1gdsz26F1xsbtY8SP4qO2C0c5eAvbGkQiizMrzZVx8BLutDTV7LuT7VegGfB4iHR4-10t-uUEnE4z_zhScAaqBbou2dP6Tjv859BAVqXSG5Ojg4rTC5kYs-T4ZqvKnGYfVPPIhSLXtG1BrZ-ICxA2&t=f2cd5c5 | 140.131.110.56 | 200 OK | 61 kB |
URL GET HTTP/1.1140.131.110.56/ScriptResource.axd?d=dV1gdsz26F1xsbtY8SP4qO2C0c5eAvbGkQiizMrzZVx8BLutDTV7LuT7VegGfB4iHR4-10t-uUEnE4z_zhScAaqBbou2dP6Tjv859BAVqXSG5Ojg4rTC5kYs-T4ZqvKnGYfVPPIhSLXtG1BrZ-ICxA2&t=f2cd5c5 IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (658), with CRLF line terminators Hasha16b08479d2573b3a414ddd587df4f32 9296eeb56098df0be9ffd9afaec1c1a7c53a8477 a8ba2da6f8986b17bd45b5937e3b3904bed5332b14286478fe6fa95c95023407
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ScriptResource.axd?d=dV1gdsz26F1xsbtY8SP4qO2C0c5eAvbGkQiizMrzZVx8BLutDTV7LuT7VegGfB4iHR4-10t-uUEnE4z_zhScAaqBbou2dP6Tjv859BAVqXSG5Ojg4rTC5kYs-T4ZqvKnGYfVPPIhSLXtG1BrZ-ICxA2&t=f2cd5c5 HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sun, 08 Dec 2024 14:18:40 GMT
Last-Modified: Sat, 09 Dec 2023 14:18:40 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:42 GMT
Content-Length: 61178
|
|
| 140.131.110.56/images/space.gif | 140.131.110.56 | 200 OK | 43 B |
URL GET HTTP/1.1140.131.110.56/images/space.gif IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/space.gif HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 43
|
|
| 140.131.110.56/images/log_precautions.png | 140.131.110.56 | 200 OK | 29 kB |
URL GET HTTP/1.1140.131.110.56/images/log_precautions.png IP140.131.110.56:80 ASN#17716 National Taiwan University
File typePNG image data, 430 x 302, 8-bit/color RGBA, non-interlaced Hashd250c879702d1db77daedfa5de1131c7 afe0cb2767c6dc28ad5ab7911b0999f26d33c59a 1743b950107f44deadd23cf64d0131b31e388c9c194ff3ac06b7007a2abaf02c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_precautions.png HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 29219
|
|
| 140.131.110.56/images/log_form_title.jpg | 140.131.110.56 | 200 OK | 4.2 kB |
URL GET HTTP/1.1140.131.110.56/images/log_form_title.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 256x37, components 3 Hasha2ed0877bbd9174f52fab4593426ac7b 1709553be230ee51f26a4dd3bd916c47ca069f47 7666e5ce5618833bbe1343222c94dfd63ff901466033a481198c5ca254bc89db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_form_title.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 4163
|
|
| 140.131.110.56/HttpRequest/MakeCheckCodePIC.ashx | 140.131.110.56 | 200 OK | 1.4 kB |
URL GET HTTP/1.1140.131.110.56/HttpRequest/MakeCheckCodePIC.ashx IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 78x30, components 3 Hash5fc2185ba8cff4aaaf181ccc9c1a8de6 998920eb4dc54fe660284a500992db09f22aea09 d434715f13e1c39563091628159a089484cd704abd7a186500837f6dcbfd8d86
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /HttpRequest/MakeCheckCodePIC.ashx HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=4aom0riqo3w2rvz2vck5u5k1; path=/; HttpOnly; SameSite=Lax
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 1379
|
|
| 140.131.110.56/images/top_bg01.jpg | 140.131.110.56 | 200 OK | 354 B |
URL GET HTTP/1.1140.131.110.56/images/top_bg01.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 7x84, components 3 Hash283dd82845014f0943133fa1b4b4d4b1 a05127af640e1e851d0c08bd4d1fa32c31f3c124 5f2ce609ef373329d8b6d63f56aece5d47437c3ef029735082729cf181f78082
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/top_bg01.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 354
|
|
| 140.131.110.56/images/top_bg02.jpg | 140.131.110.56 | 200 OK | 348 B |
URL GET HTTP/1.1140.131.110.56/images/top_bg02.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 7x33, components 3 Hash1b0a6d62dd4f4013254f28f4b9fa132d fafa8a2736cb1dadec03a89aa80c985daaaff7f7 108663d527bd111d37d7a51042a754db579e0178a4723b4ec2e9ec559220f02d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/top_bg02.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 348
|
|
| 140.131.110.56/images/log_allbg.jpg | 140.131.110.56 | 200 OK | 16 kB |
URL GET HTTP/1.1140.131.110.56/images/log_allbg.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1003x564, components 3 Hash96627c666f35282bcd5c7b69623a792f 659995741e208c4f5c1e7518534b6fd79af61850 4a1d0939622a9289dc34d3e057cf72ed1c847e33cf79bc6b84c9d6b85c8831fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_allbg.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 15970
|
|
| 140.131.110.56/Images/log_form_but.jpg | 140.131.110.56 | 200 OK | 1.5 kB |
URL GET HTTP/1.1140.131.110.56/Images/log_form_but.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 56x57, components 3 Hash850598648ce81efe69181258f031d849 e17226e04de7331db523c7f7fc99fa6a8c8744fc e48a5e18d5276b96b3d28747bda4757b555bc6fb3d6be5e2a8b66b2c0c9cb3dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Images/log_form_but.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/Inc/buttonStyle.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 1462
|
|
| 140.131.110.56/images/log_banner.jpg | 140.131.110.56 | 200 OK | 346 kB |
URL GET HTTP/1.1140.131.110.56/images/log_banner.jpg IP140.131.110.56:80 ASN#17716 National Taiwan University
File typePNG image data, 1822 x 2719, 8-bit/color RGBA, non-interlaced Size346 kB (345458 bytes) Hash3f3e9654617b51121eff63bc42990f54 9aadde89cdf61e92bf9382ae594e2d7f546c9f2b 4e668ba61b4ca3138f2799434adef7b336059ea2ffc480a368b91e14fc33e0ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/log_banner.jpg HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 04 Dec 2023 09:45:57 GMT
Accept-Ranges: bytes
ETag: "80382dae9626da1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 345458
|
|
| 140.131.110.56/favicon.ico | 140.131.110.56 | 404 Not Found | 4.7 kB |
URL GET HTTP/1.1140.131.110.56/favicon.ico IP140.131.110.56:80 ASN#17716 National Taiwan University
File typeHTML document, Unicode text, UTF-8 text Hashfc7d1b2de7d69798f81abcea37c34cf2 060300680213d061466f5cb1d3121999ea900e80 7f7331dd5b1335ea3875b2b442624118b02ced1d62850af898a038d5777282aa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 140.131.110.56
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://140.131.110.56/
Cookie: ASP.NET_SessionId=4aom0riqo3w2rvz2vck5u5k1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 09 Dec 2023 16:15:43 GMT
Content-Length: 4728
|
|