URL User Request GET HTTP/1.1IP 195.20.42.57:80
ASN#31624 Verotel International B.V.
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hashdf094f3d247c039fa141d1c2a5d7fac6 a361ea81cf7236776abc118c2e173fa53a1c1848 2744dccb28e26228839ce565cbd2a3f6aeaf5d31e3491b9a2d5e81b9f5a35055
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY HTTP Request to a *.tk domain | | suricata | medium | ET POLICY HTTP Request to a *.tk domain |
GET / HTTP/1.1
Host: grapps.tk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Sun, 03 Dec 2023 19:57:57 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 323
Connection: keep-alive
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Server: ip-172-31-32-49
Set-Cookie: JSESSIONID=AEE8019CFE618FB5F0AA95E5A1E68018; Path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
|
URL User Request GET HTTP/1.1IP195.20.42.57:80 ASN#31624 Verotel International B.V.
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hashdf094f3d247c039fa141d1c2a5d7fac6 a361ea81cf7236776abc118c2e173fa53a1c1848 2744dccb28e26228839ce565cbd2a3f6aeaf5d31e3491b9a2d5e81b9f5a35055
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY HTTP Request to a *.tk domain | | suricata | medium | ET POLICY HTTP Request to a *.tk domain |
GET / HTTP/1.1
Host: grapps.tk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Sun, 03 Dec 2023 19:57:57 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 323
Connection: keep-alive
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Server: ip-172-31-14-50
Set-Cookie: JSESSIONID=6825DC8086177BB4A1DEB512ECD03042; Path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
|
IP195.20.42.57:80 ASN#31624 Verotel International B.V.
File typeMS Windows icon resource - 1 icon, 16x16\012- data Hash9d88adf1b48d0395e690bd17e5625851 1874190d30c93ca117b3b1d65f150be38ec55a56 817d5d40f1addc3a4247e62aaf58400a7a81830addc9692b2ba65dd5068f02c8
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY HTTP Request to a *.tk domain |
GET /favicon.ico HTTP/1.1
Host: grapps.tk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://grapps.tk/
Cookie: JSESSIONID=6825DC8086177BB4A1DEB512ECD03042
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Sun, 03 Dec 2023 19:57:58 GMT
Content-Type: image/x-icon
Content-Length: 2048
Connection: keep-alive
X-Server: ip-172-31-14-50
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
|
IP 178.18.193.160:80
ASN#50941 Vargonen Teknoloji ve Bilisim Sanayi Ticaret Anonim Sirketi
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash8073765ceabe2993b78e67969eaa656d 9375a0f44ff54dabcb9306908e86ce12ad42cad9 9ad886bc8d4e37fb959a3673c2ea2b4d48f14fd5c7e83cb5c790f4fd9344e343
GET / HTTP/1.1
Host: grapptk.grappsgames.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://grapps.tk/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cneonction: close
Content-Type: text/html
Last-Modified: Tue, 28 Feb 2023 22:31:35 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 265
Date: Sun, 03 Dec 2023 19:57:54 GMT
Server: LiteSpeed
|