| hortabox.com/ripp/qbot.zip |  154.86.78.107 | 301 Moved Permanently | 162 B |
URL hortabox.com/ripp/qbot.zip IP154.86.78.107:0
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /ripp/qbot.zip HTTP/1.1
Host: hortabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 30 Nov 2024 13:14:19 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.hortabox.com/ripp/qbot.zip
|
|
| www.hortabox.com/ripp/qbot.zip | 154.86.78.107 | 302 Moved Temporarily | 2 B |
URL www.hortabox.com/ripp/qbot.zip IP154.86.78.107:0
File typeASCII text, with no line terminators Hash23b58def11b45727d3351702515f86af 099600a10a944114aac406d136b625fb416dd779 6c179f21e6f62b629055d8ab40f454ed02e48b68563913473b857d3638e23b28
GET /ripp/qbot.zip HTTP/1.1
Host: www.hortabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 30 Nov 2024 13:14:22 GMT
Content-Type: text/html; charset=gbk
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=t0g0922hq9e23pe40o93ph6a25; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: http://www.hortabox.com/404.html
|
|
| www.hortabox.com/404.html | 154.86.78.107 | 200 OK | 148 B |
URL www.hortabox.com/404.html IP154.86.78.107:0
File typeHTML document, ASCII text Hash630e1f9fef1a483fe84154e2d0d046df f10e0cf39fb920a438116caaea80a71e0dcdc162 9cad3cff676946810a81047247f12e4e51faccc01df4134edfd871aee8ba0956
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO HUNTING HTTP 200 Stat Code with 404 in Body |
GET /404.html HTTP/1.1
Host: www.hortabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t0g0922hq9e23pe40o93ph6a25
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 30 Nov 2024 13:14:22 GMT
Content-Type: text/html
Content-Length: 148
Last-Modified: Wed, 14 Aug 2024 05:01:20 GMT
Connection: keep-alive
ETag: "66bc3a20-94"
Accept-Ranges: bytes
|
|
| www.hortabox.com/favicon.ico | 154.86.78.107 | 302 Moved Temporarily | 2 B |
URL GET HTTP/1.1www.hortabox.com/favicon.ico IP154.86.78.107:80
Requested byhttp://www.hortabox.com/404.html
File typeASCII text, with no line terminators Hash23b58def11b45727d3351702515f86af 099600a10a944114aac406d136b625fb416dd779 6c179f21e6f62b629055d8ab40f454ed02e48b68563913473b857d3638e23b28
GET /favicon.ico HTTP/1.1
Host: www.hortabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hortabox.com/404.html
Cookie: PHPSESSID=t0g0922hq9e23pe40o93ph6a25
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 30 Nov 2024 13:14:23 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://www.building.co.uk/favicon.ico
|
|
| www.building.co.uk/favicon.ico |  35.71.136.153 | 404 Not Found | 35 B |
URL GET HTTP/2www.building.co.uk/favicon.ico IP35.71.136.153:443
Requested byhttp://www.hortabox.com/404.html CertificateIssuerAmazon Subjecthousingtoday.co.uk FingerprintB6:33:70:71:B9:18:33:8A:89:A3:87:8D:4E:7B:2F:07:21:5C:D3:83 ValidityTue, 12 Mar 2024 00:00:00 GMT - Thu, 10 Apr 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash4f6451b50628d297f6db1cfa5edad8f6 066770ecd59143d7b749d62a05c00336bfad4f0d 269e362be9bc2db180b7b371563fb7b51966522be840d8ef2042d99c6f437b51
GET /favicon.ico HTTP/1.1
Host: www.building.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.hortabox.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 30 Nov 2024 13:14:23 GMT
content-type: text/html; charset=utf-8
content-length: 35
cache-control: private
set-cookie: WV_SESSION=vrkmzfy1ljovzzw4c4aswfbj; path=/; HttpOnly; SameSite=Lax
x-server-name: LIVE-FAILOVER-3
X-Firefox-Spdy: h2
|
|