Report - 157.254.223.253/

Report Overview

Submitted URL
157.254.223.253/
IP
157.254.223.253
ASN
#213186 Yanoor Islam Khan
Submitted
2024-04-26 21:26:20
Access
public
Website Title
Index of /
Final URL
157.254.223.253/
Tags
opendir
urlquery detections
Audit - Open directory

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
157.254.223.253	unknown	unknown	No data	No data	2.6 kB	4.5 kB	157.254.223.253

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	157.254.223.253	Sinkholed
2024-04-26	medium	157.254.223.253	Sinkholed
2024-04-26	medium	157.254.223.253	Sinkholed
2024-04-26	medium	157.254.223.253	Sinkholed
2024-04-26	medium	157.254.223.253	Sinkholed
2024-04-26	medium	157.254.223.253	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

157.254.223.253/

157.254.223.253

200 OK

1.6 kB

URL User Request GET HTTP/1.1
157.254.223.253/
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
HTML document, ASCII text
Size
1.6 kB (1623 bytes)
Hash
5c6716f11c8842a32cea4c4fca9c2f8a
ed7a5c91d8a4dc0054d01fee165b7fbe75f5601a
358f673a2d07ce2fb803ed2a7bbaf5477bf48d2904ccde1c5477004888114425

Detections

Analyzer	Verdict	Alert
urlquery	none	Audit - Open directory
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 1623
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8

157.254.223.253/icons/blank.gif

157.254.223.253

200 OK

148 B

URL GET HTTP/1.1
157.254.223.253/icons/blank.gif
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Requested by
https://157.254.223.253/
Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
GIF image data, version 89a, 20 x 22
Size
148 B (148 bytes)
Hash
19517fb39a31be6b8d7ccf53ad84908f
ebbcfdc6acc99f7aac3bf7fe72bc55f07f03f7e9
3cb0e54babf019703fe671a32fcc3947aab9079ec2871cf0f9639245cc12d878

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/blank.gif HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.254.223.253/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "94-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 148
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

157.254.223.253/icons/folder.gif

157.254.223.253

200 OK

225 B

URL GET HTTP/1.1
157.254.223.253/icons/folder.gif
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Requested by
https://157.254.223.253/
Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
GIF image data, version 89a, 20 x 22
Size
225 B (225 bytes)
Hash
d342cba375fea336967317bdb5d7cf19
768de3abb08abc5fe2db93454a78c9d3d955d5e4
fbe5eca717cfbcb58891d431f9afaf30aa740d9fce007e820a599f22afa0dee2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/folder.gif HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.254.223.253/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "e1-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 225
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif

157.254.223.253/icons/image2.gif

157.254.223.253

200 OK

309 B

URL GET HTTP/1.1
157.254.223.253/icons/image2.gif
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Requested by
https://157.254.223.253/
Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
GIF image data, version 89a, 20 x 22
Size
309 B (309 bytes)
Hash
e9d3a53f5dab2854316d3f8a4afe69b0
b13d3b360793455ab7af134a09c683eb31b72ef5
1e09d5e4e03c57ba24c23b84cc4af3ce66cb44259849d929b911711c25d25c5e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/image2.gif HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.254.223.253/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "135-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 309
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif

157.254.223.253/icons/text.gif

157.254.223.253

200 OK

229 B

URL GET HTTP/1.1
157.254.223.253/icons/text.gif
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Requested by
https://157.254.223.253/
Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
GIF image data, version 89a, 20 x 22
Size
229 B (229 bytes)
Hash
840e8b62bc6fd841c93d3af73bda9c40
08ee70b4f29d27c84b7ab55c96b71c640a1e8163
661d43fb30151a050da3b5cef49a2c7d0b01eeafdf1f4a001873406658b0f776

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/text.gif HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.254.223.253/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "e5-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif

157.254.223.253/favicon.ico

157.254.223.253

404 Not Found

302 B

URL GET HTTP/1.1
157.254.223.253/favicon.ico
IP
157.254.223.253:443
ASN
#213186 Yanoor Islam Khan

Requested by
https://157.254.223.253/
Certificate
Issuer
Subjectlocalhost
FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6
ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT

File type
HTML document, ASCII text
Size
302 B (302 bytes)
Hash
dcbf47dc95854415bf6f54e9858a3049
b8bd2e0ca46a7b3841d405e38490b0a5e9d99a16
2baeb511e5c71fcf915fb11c83390b213aec26b68dee3de3a3ce134c464e7005

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 157.254.223.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157.254.223.253/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 21:25:54 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 302
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by