| 204.12.199.30/dashboard/gate.php | 204.12.199.30 | | 25 B |
URL 204.12.199.30/dashboard/gate.php IP204.12.199.30:0
File typeASCII text, with no line terminators Hashd4c8dda61cb6f27a9deda397196b945c d9ea9fe36105665a80bee3b569c9e89f65286681 fbb37109722a1b25c2609abbb91d742be5de1598014dac6be505af217b9e711d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
NIDS | Severity | Alert | suricata | high | ET MALWARE Generic Request to gate.php Dotted-Quad | suricata | medium | ET HUNTING Suspicious GET To gate.php with no Referer |
GET /dashboard/gate.php HTTP/1.1
Host: 204.12.199.30
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:40:26 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
X-Powered-By: PHP/8.0.30
Content-Length: 25
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
| 204.12.199.30/favicon.ico | 204.12.199.30 | | 31 kB |
URL 204.12.199.30/favicon.ico IP204.12.199.30:0
File typeMS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel Hash6eb4a43cb64c97f76562af703893c8fd c50c4273b9d2433c6069454f971ed6653e07c126 1d7c95c5eea00a8083a95810f902682f9e26e7fbb7876b022a403642d776d0c9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 204.12.199.30
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://204.12.199.30/dashboard/gate.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:40:26 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Thu, 16 Jul 2015 15:32:32 GMT
ETag: "78ae-51affc7a4c400"
Accept-Ranges: bytes
Content-Length: 30894
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/x-icon
|