Report - 212.237.254.117/iread_swedish

Report Overview

Submitted URL
212.237.254.117/iread_swedish_resources.zip
IP
212.237.254.117
ASN
#206825 siebnich.com GmbH
Submitted
2024-04-25 15:33:06
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
212.237.254.117	unknown	unknown	2022-12-15	2024-01-29	413 B	114 kB	212.237.254.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 15:32:41	medium	Client IP	212.237.254.117	ET INFO Dotted Quad Host ZIP Request

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	212.237.254.117	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
212.237.254.117/iread_swedish_resources.zip
IP
212.237.254.117
ASN
#206825 siebnich.com GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
114 kB (113686 bytes)
Hash
08d61c1b8af0a5051559309a7dacfadf
fdbaae8d9216280d1865fddcff16f4f1ed367f39
89dd804c0e8ab24036d2946846a020216c895b4b2238caa0d3c8eec9fcbf2c70

Archive (20)

Modified	Filename	Size	Md5	File type
2010-04-06 15:14	ActivationDialog.sv.resx	8.4 kB	c77c7c7ec91ffea7085e65658963b794	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	BetaExpiredDialog.sv.resx	7.8 kB	e50acae26c36e45ec552e07bd36f84a6	XML 1.0 document, ASCII text, with CRLF line terminators
2009-07-21 14:05	BetaOutOfDateDialog.resx	15 kB	87be5045f7f86d42b9bee1402ad78f19	XML 1.0 document, ASCII text, with CRLF line terminators
2010-04-06 15:14	BetaRunningDialog.sv.resx	7.8 kB	e50acae26c36e45ec552e07bd36f84a6	XML 1.0 document, ASCII text, with CRLF line terminators
2010-04-06 15:14	DeleteBookmarkDialog.sv.resx	7.7 kB	b8bf8e6f94e7d0b8612a2412b279c9a8	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	DemoVersionDialog.sv.resx	8.5 kB	ebf457c635f60b3260bff626c33ce24a	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	ExportDialog.sv.resx	7.7 kB	8b7832a96da4908bb8ab6aabec2c340f	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	FindBookmarkDialog.sv.resx	7.7 kB	1f03f1d1994ee1ebe5822812e85be26a	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	FindHeadingDialog.sv.resx	7.7 kB	e73b871a38a9f65c3c82bb872c941eeb	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	FindPageDialog.sv.resx	7.7 kB	c7363be921070927a76f636b0680661a	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	FindTextDialog.sv.resx	8.2 kB	996154e8ad1b0b5e651644d807351b94	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	ImportDialog.sv.resx	7.7 kB	42a0efd3b8e6c87f340e9aae9ba3e73d	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	InfoDialog.sv.resx	7.8 kB	32e5db1010553ad79547c0b252f1401a	XML 1.0 document, ASCII text, with CRLF line terminators
2017-01-24 12:17	IREAD_SVE_V13.doc	199 kB	47c9a6176dc92a04a5fcb53587872e9f	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Title: IRead, Author: MVB, Template: Manual, Last Saved By: Margot von Bed, Revision Number: 12, Name of Creating Application: Microsoft Office Word, Last Printed: Wed Oct 7 09:59:00 2009, Create Time/Date: Mon May 16 12:33:00 2011, Last Saved Time/Date: Wed Nov 28 14:11:00 2012, Number of Pages: 21, Number of Words: 4798, Number of Characters: 30233, Security: 0
2013-12-03 16:45	MainForm.sv.resx	27 kB	63118e0184fb844f6e8427b58522292e	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	NewBookmarkDialog.sv.resx	7.9 kB	b45ade7d30d5e3cc52c26de6f10ed0b5	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2012-06-12 10:03	PageStackDialog.resx	12 kB	c5bde120ada2aafee6c4376ab48d3351	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2015-09-22 10:11	Resources.sv.resx	16 kB	15fa6bc08a6641f1d0c33654ce234ac9	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
2010-04-06 15:14	SelectScannerDialog.sv.resx	8.5 kB	8c788ef92d798e02602a6634dfae7ed4	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
2010-04-06 15:14	TrialPeriodExpiredDialog.sv.resx	8.8 kB	9b72e7072df1e2dc80c1dfa94f29cba8	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

212.237.254.117/iread_swedish_resources.zip

212.237.254.117

200 OK

114 kB

URL User Request GET HTTP/1.1
212.237.254.117/iread_swedish_resources.zip
IP
212.237.254.117:80
ASN
#206825 siebnich.com GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
114 kB (113686 bytes)
Hash
08d61c1b8af0a5051559309a7dacfadf
fdbaae8d9216280d1865fddcff16f4f1ed367f39
89dd804c0e8ab24036d2946846a020216c895b4b2238caa0d3c8eec9fcbf2c70

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	medium	ET INFO Dotted Quad Host ZIP Request

HTTP Headers

GET /iread_swedish_resources.zip HTTP/1.1
Host: 212.237.254.117
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 15:32:40 GMT
Server: Apache/2.4.51 (Win64) OpenSSL/1.1.1l
Last-Modified: Mon, 04 May 2020 12:14:53 GMT
ETag: "1bc16-5a4d17a8100f3"
Accept-Ranges: bytes
Content-Length: 113686
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (20)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers