Report Overview
Visitedpublic
2024-07-19 03:40:44
Tags
Submit Tags
URL
221.6.36.213:18189/files/powershell_003/powercat.ps1
Finishing URL
221.6.36.213:18189/files/powershell_003/powercat.ps1
IP / ASN
221.6.36.213
Title
221.6.36.213:18189/files/powershell_003/powercat.ps1
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
r10.o.lencr.org | unknown | 2020-06-29 | 2024-06-06 21:45:11 | 2024-07-18 18:12:17 | 2.9 kB | 8.0 kB |  23.36.76.226 | |
221.6.36.213:18189 3 alert(s) on this Domain | unknown | unknown | No data | No data | 802 B | 70 kB | 221.6.36.213 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 221.6.36.213 | ET INFO PS1 Powershell File Request | |
| high | 221.6.36.213 | Client IP | ETPRO POLICY PS/PowerCat Inbound via HTTP |
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-07-19 | medium | 221.6.36.213:18189/files/powershell_003/powercat.ps1 | Detects PowerCat hacktool |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-07-19 | medium | 221.6.36.213 | Sinkholed |
| 2024-07-19 | medium | 221.6.36.213 | Sinkholed |
ThreatFox
No alerts detected
JavaScript (0)
No JavaScripts
HTTP Transactions (11)
| URL | IP | Response | Size |
|---|