URL User Request GET HTTP/1.1IP 194.228.35.35:80
ASN#5610 O2 Czech Republic, a.s.
File typeASCII text, with no line terminators Hash17a0348f74c7ad6269494f66652700cf b83cd00a1cccd9a5fa465de68e919b1f924e7d21 556c9cc2471310d11eb2c4090dc3e19590021719a5da084394a505a72504048f
NIDS | Severity | Alert | suricata | medium | ET HUNTING Terse Request for .txt - Likely Hostile |
GET /2.txt HTTP/1.1
Host: www.ibetlemy.cz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 23 Oct 2024 13:11:49 GMT
Server: Apache/2.0.64 (Win32) DAV/2 mod_ssl/2.0.64 OpenSSL/0.9.8o PHP/5.2.6
Last-Modified: Wed, 23 Oct 2024 12:24:26 GMT
ETag: "dccf8-9-f7803e7a"
Accept-Ranges: bytes
Content-Length: 9
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/plain
|
| www.ibetlemy.cz/favicon.ico | 194.228.35.35 | 404 Not Found | 335 B |
URL GET HTTP/1.1www.ibetlemy.cz/favicon.ico IP 194.228.35.35:80
ASN#5610 O2 Czech Republic, a.s.
Requested byhttp://www.ibetlemy.cz/2.txt
File typeHTML document, ASCII text Hasha16b5ef6503eac7dcd4ad18f91339238 7a2739b0b9b8d55c14f6ccb4592d41e56d779309 c9189f36311c8e15f1731e7fa31580504389efb71f2cd146e65ec6d6b761bebf
GET /favicon.ico HTTP/1.1
Host: www.ibetlemy.cz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.ibetlemy.cz/2.txt
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 23 Oct 2024 13:11:49 GMT
Server: Apache/2.0.64 (Win32) DAV/2 mod_ssl/2.0.64 OpenSSL/0.9.8o PHP/5.2.6
Content-Length: 335
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|