IP 77.111.17.23:0
ASN#3212 Telemach UG d.o.o.
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (465), with CRLF line terminators Hash6ee94a3a98a5f20c937254da3678b7cd a8a6dd4465e0d76a2a37f2e939ce99fb6fbf4284 19703eafc98205244ce371e777641e8ac3e60ce3ff1ff110ed5af7b2797b0144
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain |
GET / HTTP/1.1
Host: www-mojsplet.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Jan 2025 04:56:37 GMT
Server: Apache/2.2.17 (Win32) PHP/5.2.17
X-Powered-By: PHP/5.2.17
Set-Cookie: PHPSESSID=93q5s410nr5uo3htrqsh0g1670; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 1673
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
IP77.111.17.23:0 ASN#3212 Telemach UG d.o.o.
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (465), with CRLF line terminators Hash6ee94a3a98a5f20c937254da3678b7cd a8a6dd4465e0d76a2a37f2e939ce99fb6fbf4284 19703eafc98205244ce371e777641e8ac3e60ce3ff1ff110ed5af7b2797b0144
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain |
GET / HTTP/1.1
Host: www-mojsplet.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Jan 2025 04:56:38 GMT
Server: Apache/2.2.17 (Win32) PHP/5.2.17
X-Powered-By: PHP/5.2.17
Set-Cookie: PHPSESSID=5ikanhim8o95nrpt3n7k24rr00; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 1673
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
| www-mojsplet.mywire.org/stran_je_v_urejanju.png | 77.111.17.23 | 200 OK | 5.3 kB |
URL GET HTTP/1.1www-mojsplet.mywire.org/stran_je_v_urejanju.png IP77.111.17.23:80 ASN#3212 Telemach UG d.o.o.
Requested byhttp://www-mojsplet.mywire.org/
File typePNG image data, 100 x 100, 8-bit/color RGB, non-interlaced Hash6d9ee73639d638d682cd15a838db630d b0d0052ac5f338387e02cc2e464aed98ccac6114 6e863d2818f79e95bfdfb527be2fbf81e909c06dd1a4cd9e5fd681d473b1f067
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain |
GET /stran_je_v_urejanju.png HTTP/1.1
Host: www-mojsplet.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www-mojsplet.mywire.org/
Cookie: PHPSESSID=5ikanhim8o95nrpt3n7k24rr00
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Jan 2025 04:56:38 GMT
Server: Apache/2.2.17 (Win32) PHP/5.2.17
Last-Modified: Tue, 29 Mar 2016 05:12:59 GMT
ETag: "50000000f207c-14e4-52f2915385fcc"
Accept-Ranges: bytes
Content-Length: 5348
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
| www-mojsplet.mywire.org/plaxo.png | 77.111.17.23 | 200 OK | 1.0 kB |
URL GET HTTP/1.1www-mojsplet.mywire.org/plaxo.png IP77.111.17.23:80 ASN#3212 Telemach UG d.o.o.
Requested byhttp://www-mojsplet.mywire.org/
File typePNG image data, 27 x 21, 8-bit/color RGBA, non-interlaced Hash232cae9a554436c4b034d15466fbd3d1 2eb1c38fbe685d458ffafb69a0fdb75a72f9a934 a1eae9a72a90d3117ec4319b192e725ed7b55ee562c3d7f28e522e5672e9085a
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.mywire .org Domain |
GET /plaxo.png HTTP/1.1
Host: www-mojsplet.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www-mojsplet.mywire.org/
Cookie: PHPSESSID=5ikanhim8o95nrpt3n7k24rr00
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Jan 2025 04:56:38 GMT
Server: Apache/2.2.17 (Win32) PHP/5.2.17
Last-Modified: Thu, 10 Mar 2016 18:22:34 GMT
ETag: "60000000f2054-3ec-52db5e5fd5d13"
Accept-Ranges: bytes
Content-Length: 1004
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|