IP 175.198.66.215:80
File typeHTML document, ASCII text Hashf0dee15a893daedc1bfdf382236aeb12 ec9eee83546abdf7a5bed87ac7deb5332a7a12ed df1cb0ee82635110e1444a497a5702c5dee07eec911d7e7f4ea8494609579bf8
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: jeon.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Apr 2025 15:59:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Sun, 31 Mar 2024 03:32:08 GMT
ETag: W/"6608d938-6cd"
Content-Encoding: gzip
|
| jeon.zip/web_images/illus_webstation_enabled.jpg | 175.198.66.215 | 200 OK | 56 kB |
URL GET jeon.zip/web_images/illus_webstation_enabled.jpg IP 175.198.66.215:80
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1000x660, components 3 Hash7dfcf5e5caf18d82ca56a32bc99800c8 46a979579fff2117927003feeafc093a96abe7e4 19abc722adcb6e15c3b2e5c927be8b8295b3ff6451241484132325d47ac995df
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET /web_images/illus_webstation_enabled.jpg HTTP/1.1
Host: jeon.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jeon.zip/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Apr 2025 15:59:04 GMT
Content-Type: image/jpeg
Content-Length: 55967
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Sun, 31 Mar 2024 03:32:09 GMT
ETag: "6608d939-da9f"
Accept-Ranges: bytes
|
IP 175.198.66.215:80
File typeHTML document, ASCII text Hashf0dee15a893daedc1bfdf382236aeb12 ec9eee83546abdf7a5bed87ac7deb5332a7a12ed df1cb0ee82635110e1444a497a5702c5dee07eec911d7e7f4ea8494609579bf8
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: jeon.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jeon.zip/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 14 Apr 2025 15:59:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Sun, 31 Mar 2024 03:32:08 GMT
ETag: W/"6608d938-6cd"
Content-Encoding: gzip
|
IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS | Severity | Alert | suricata | low | ET INFO HTTP Request to a *.zip Domain | suricata | low | ET INFO HTTP Request to a *.zip Domain |
GET / HTTP/1.1
Host: jeon.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|