GET 118.185.187.137/moodle/login/forgot_password.php
6.4 kB URL User Request GET 118.185.187.137/moodle/login/forgot_password.php
IP
ASN #55410 Vodafone Idea Ltd
File type HTML document, ASCII text, with very long lines (11832)
Hash 835d0d2197109186476095620c4b9e91
32ac6505136b85031bca96d767290c426f7394aa
fe689d364ae6ed2cbc7953c194938eeaa34a3a7bc6c494d8700b033b947861d5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/login/forgot_password.php HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq; path=/moodle/
Expires:
Cache-Control: private, pre-check=0, post-check=0, max-age=0, no-transform
Pragma: no-cache
Content-Language: en
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6395
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
GET 118.185.187.137/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
200 OK 1.0 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type ASCII text, with very long lines (1979)
Hash 513a25e692b0f89326ceae1b1fd34b3f
413a14125fe60e21ae94a4b69dd5c8ae9c06c6cb
45b30b681ac946d1ef0352364b41a3908b8f351aa8613d87241a94489bf9fd8f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.css HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Sat, 01 Jul 2023 10:23:06 GMT
Expires: Sat, 17 May 2025 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b9bc567c469e2872cf3bbb14603342a72de2509b"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1035
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css;charset=UTF-8
GET 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/javascript-static.js
200 OK 6.8 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/javascript-static.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (1875)
Hash 3e48d7afbba30532379f260739ca39a5
0512338a4efebe9b646a882a1fc09055a8a3eb5a
111b6329693bb290516569c49cd2f5b578d4310138d7fb36fef8fd4a8288a38d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/javascript.php/1688442432/lib/javascript-static.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "f7b71ae595217555dc77e96f85838e3ca295c425"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 04 Jul 2023 03:47:13 GMT
Expires: Tue, 20 Aug 2024 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6812
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/requirejs/require.min.js
200 OK 6.7 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/requirejs/require.min.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (17535)
Hash 1f53ac504f7e69a6df96140eed2d4df2
da00136dd3fd0ccab626d7555ccb5fdf1c096fad
9ce0dbd6a1df9332653e27d1ddc505c5b78fd82b4112de0ec63840c3fbe0b8c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/javascript.php/1688442432/lib/requirejs/require.min.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "3e6918260473caf21523f7e09264af11c82cc5f6"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 04 Jul 2023 03:47:12 GMT
Expires: Tue, 20 Aug 2024 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6662
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/polyfills/polyfill.js
200 OK 60 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/polyfills/polyfill.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (36874)
Hash 2f910e51a8154ac70aff76b6d14628c0
9f1a5e85ebd61692d7480c11f652cb29735f6d6d
1d6ba14cf4f307b9bbb13d2ad4e4cb5e701add10378e1b785c4c80dba1342170
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/javascript.php/1688442432/lib/polyfills/polyfill.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "424907378ddb1b7cdbac831f0016a122184cb665"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 04 Jul 2023 03:47:13 GMT
Expires: Tue, 20 Aug 2024 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
200 OK 84 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (6010)
Hash 8039fd714b58260199b364107c92bff6
3776c202a78a99e5eeaafbdc7d8ad61acee3af1d
13eaaadfa414f262b7964320054bb2b322b9ef9f3522bc25c9d60dc83b5141cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/yui_combo.php?rollup/3.17.2/yui-moodlesimple-min.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Sat, 01 Jul 2023 10:23:06 GMT
Expires: Sat, 17 May 2025 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "78581a0bac8a932effb32db3e91e0f2f2b47c08e"
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
GET 118.185.187.137/moodle/theme/styles.php/classic/1688550504_1/all
200 OK 122 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/styles.php/classic/1688550504_1/all
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size 122 kB (122456 bytes)
Hash 1ca1b53399c6dc9328d7fa7d1de65183
d6b1679d53ad5a37d7d30c10e9c31a6f84a3f674
21d764bb34cf6c955f1894c85f7a16369abaf829b44c14da68b7ca1e03854ff4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/styles.php/classic/1688550504_1/all HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "6de3153da726e959dc548d855485f43d76336377"
Content-Disposition: inline; filename="styles.php"
Last-Modified: Wed, 05 Jul 2023 09:48:24 GMT
Expires: Tue, 20 Aug 2024 12:32:27 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css; charset=utf-8
GET 118.185.187.137/moodle/theme/yui_combo.php?m/1688442432/core/event/event-min.js&m/1688442432/filter_mathjaxloader/loader/loader-min.js
200 OK 1.0 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/yui_combo.php?m/1688442432/core/event/event-min.js&m/1688442432/filter_mathjaxloader/loader/loader-min.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (2627), with no line terminators
Hash 76617687325f67884815a9b2b0d4e2be
2f7b8734ca64306dad757d2a89fbd2dbb3cdb2fa
01e644698fc787a38c18a7312893aaf9081b994f57f059ba3274361f7b09b206
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/yui_combo.php?m/1688442432/core/event/event-min.js&m/1688442432/filter_mathjaxloader/loader/loader-min.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:28 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Sat, 01 Jul 2023 10:23:06 GMT
Expires: Sat, 17 May 2025 12:32:28 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "fe3eafd2ac6fabed896c92dc21fd19bc00b7d916"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1047
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
GET 118.185.187.137/moodle/theme/image.php/classic/theme/1688550504/favicon
200 OK 1.2 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/image.php/classic/theme/1688550504/favicon
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 135aed33c0a7b8f44f0227a71b9ce345
120e10c8a17aebb31c74b6988f8bce9b05dd6606
7afbabec7cddb87ab3b2c3f56509ca9c8f76925db0570372f1a6a366606be1b4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/image.php/classic/theme/1688550504/favicon HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:29 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "b970129879acca1c56b8368e14b33f876ec29bce"
Content-Disposition: inline; filename="favicon.ico"
Last-Modified: Wed, 05 Jul 2023 09:48:24 GMT
Expires: Tue, 20 Aug 2024 12:32:29 GMT
Pragma:
Cache-Control: public, max-age=7776000, no-transform, immutable
Accept-Ranges: none
Content-Length: 1150
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
GET 118.185.187.137/moodle/lib/requirejs.php/1688442432/core/first.js
200 OK 488 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/requirejs.php/1688442432/core/first.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (15426)
Size 488 kB (487688 bytes)
Hash 78c1499409c6233087a661242889f485
2e46d9247ae4822375f9412ed8025db372991e56
fb5b28bb688ccb0ff59aa8c89958eadac7f8cdec445bcc6bf347d2a417954b92
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/requirejs.php/1688442432/core/first.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:28 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "b1b9143ea29a87012822dfeec350b99cd7d3ddff"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Tue, 04 Jul 2023 03:47:12 GMT
Expires: Tue, 20 Aug 2024 12:32:28 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/jquery/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/javascript.php/1688442432/lib/jquery/jquery-3.6.0.min.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 54e404edcb6b8902433c6a8123e018a7
fb2f413ac31fd0607b3048426e37d81658cb0ecd
37da17e676b0298cd88c1835b00618318df670f9ed4c199274546d4555248dab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/javascript.php/1688442432/lib/jquery/jquery-3.6.0.min.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:29 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "a534cf0c6cc65964d633c71bcaefdb07f7a457c8"
Content-Disposition: inline; filename="javascript.php"
Last-Modified: Tue, 04 Jul 2023 03:47:12 GMT
Expires: Tue, 20 Aug 2024 12:32:29 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/lib/requirejs.php/1688442432/core_form/events.js
200 OK 488 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/requirejs.php/1688442432/core_form/events.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (15426)
Size 488 kB (487688 bytes)
Hash 78c1499409c6233087a661242889f485
2e46d9247ae4822375f9412ed8025db372991e56
fb5b28bb688ccb0ff59aa8c89958eadac7f8cdec445bcc6bf347d2a417954b92
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/requirejs.php/1688442432/core_form/events.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:28 GMT
Server: Apache/2.4.52 (Ubuntu)
Etag: "b1b9143ea29a87012822dfeec350b99cd7d3ddff"
Content-Disposition: inline; filename="requirejs.php"
Last-Modified: Tue, 04 Jul 2023 03:47:12 GMT
Expires: Tue, 20 Aug 2024 12:32:28 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
GET 118.185.187.137/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js
200 OK 4.8 kB URL GET HTTP/1.1 118.185.187.137/moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
File type JavaScript source, ASCII text, with very long lines (3857)
Hash 0151b48e61660bed14bf6acd5bb77210
e096360d7d8819dbbf42e7137ed9e37cdd286700
26d1a45d173703f01ca9bb8be4335bae6005c3bc0a5f78b380ad18fb152b8835
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/theme/yui_combo.php?3.17.2/event-mousewheel/event-mousewheel-min.js&3.17.2/event-resize/event-resize-min.js&3.17.2/event-hover/event-hover-min.js&3.17.2/event-touch/event-touch-min.js&3.17.2/event-move/event-move-min.js&3.17.2/event-flick/event-flick-min.js&3.17.2/event-valuechange/event-valuechange-min.js&3.17.2/event-tap/event-tap-min.js HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Disposition: inline; filename="combo"
Last-Modified: Sat, 01 Jul 2023 10:23:06 GMT
Expires: Sat, 17 May 2025 12:32:30 GMT
Pragma:
Cache-Control: public, max-age=31104000, immutable
Accept-Ranges: none
Etag: "b24ca831785ba367093f089618e840be511be85d"
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4808
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
POST 118.185.187.137/moodle/lib/ajax/service.php?sesskey=ZcpvC0QVwh&info=media_videojs_get_language
200 OK 4.5 kB URL POST HTTP/1.1 118.185.187.137/moodle/lib/ajax/service.php?sesskey=ZcpvC0QVwh&info=media_videojs_get_language
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
Hash 1d55bc8fb15ace98616b30027310a057
1109dee50f7660eb75b2ec7dfc5889434d91351c
aaf9075c9b35ee27d05a21e89ec43d1b2013a8151360e59050c8977edd33d5b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /moodle/lib/ajax/service.php?sesskey=ZcpvC0QVwh&info=media_videojs_get_language HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 76
Origin: http://118.185.187.137
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4531
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 111 B URL GET HTTP/1.1 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
Hash aa4910d44753abc18bf53998693d909d
96a26d0478af621a4df6bde7cbc05a8176806903
28824dbe3abcada0b65643717944a5f84416d44cbb5b5e478cb25bbc56d4e7a0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/ajax/service-nologin.php?info=core_get_string&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22changesmadereallygoaway%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22moodle%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Expires: Tue, 20 Aug 2024 12:32:30 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 111
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1688550504&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22classic%22%7D%7D%5D
200 OK 32 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1688550504&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22classic%22%7D%7D%5D
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
Hash df833a3af68f7af1eed8ebdd63849988
a270c7f6c57d1d59076479b534ade5fc46272c03
fbee23df614378fdbfaba378d90fe416e5c6fa4d4ba2951d28cf4e3cef0fd21b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/ajax/service-nologin.php?info=core_output_load_fontawesome_icon_system_map&cachekey=1688550504&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_fontawesome_icon_system_map%22%2C%22args%22%3A%7B%22themename%22%3A%22classic%22%7D%7D%5D HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Expires: Tue, 20 Aug 2024 12:32:30 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
GET 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 211 B URL GET HTTP/1.1 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
Hash c135ebb8306e47146c197265b9c9022b
425c439b399cc4a29df884f4ac5aa75505944c2c
afefe583c5a695189962783424716b19758b2a08e71480cb91a73c88c98a20be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/ajax/service-nologin.php?info=6-method-calls&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22cancel%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22closebuttontitle%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22loading%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22savechanges%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A4%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showless%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A5%2C%22methodname%22%3A%22core_get_string%22%2C%22args%22%3A%7B%22stringid%22%3A%22showmore%22%2C%22stringparams%22%3A%5B%5D%2C%22component%22%3A%22core_form%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Expires: Tue, 20 Aug 2024 12:32:30 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 211
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
GET 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%5D
200 OK 2.4 kB URL GET HTTP/1.1 118.185.187.137/moodle/lib/ajax/service-nologin.php?info=core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%5D
IP
ASN #55410 Vodafone Idea Ltd
Requested by http://118.185.187.137/moodle/login/forgot_password.php
Hash 277cbffc8b01633c828dc3c8745240ae
67c5c5c693b256710fe2c8d51a9ac72541dc3a57
09604128b770c0e743538b387c387056ab0eb8108d7b700e98affe9d18d55a52
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /moodle/lib/ajax/service-nologin.php?info=core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies,core_output_load_template_with_dependencies&cachekey=1688442432&args=%5B%7B%22index%22%3A0%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22loading%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A1%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A2%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22modal_backdrop%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%2C%7B%22index%22%3A3%2C%22methodname%22%3A%22core_output_load_template_with_dependencies%22%2C%22args%22%3A%7B%22component%22%3A%22core%22%2C%22template%22%3A%22pix_icon_fontawesome%22%2C%22themename%22%3A%22classic%22%2C%22lang%22%3A%22en%22%7D%7D%5D HTTP/1.1
Host: 118.185.187.137
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://118.185.187.137/moodle/login/forgot_password.php
Cookie: MoodleSession=er1f7d6ml8i0glt13mlmbmv8iq
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 May 2024 12:32:30 GMT
Server: Apache/2.4.52 (Ubuntu)
Expires: Tue, 20 Aug 2024 12:32:30 GMT
Pragma:
Cache-Control: public, max-age=7776000, immutable
Accept-Ranges: none
Content-Length: 2366
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json; charset=utf-8
118.185.187.137