| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashf63e8d9e64abf0e5b2784ca051160e84 d15d17504ed5c584ba42145060cf745fdb41c1d0 652ee033c72bc8eadcf29c25a5387bc303bf86e6c57f262c576117f659f15eab
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "652EE033C72BC8EADCF29C25A5387BC303BF86E6C57F262C576117F659F15EAB"
Last-Modified: Fri, 05 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5803
Expires: Sun, 07 Jul 2024 05:07:09 GMT
Date: Sun, 07 Jul 2024 03:30:26 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hashe9a839fbbf2a5bc4f1a01cd5fca04d5e ff4396bb2dcc9211b70f2e3266720172ee2ce085 3bb2a3698d452f1de2ff4f283a89fc427d9fe01c02ad968f215bee1834b1c1e3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3BB2A3698D452F1DE2FF4F283A89FC427D9FE01C02AD968F215BEE1834B1C1E3"
Last-Modified: Thu, 04 Jul 2024 15:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19270
Expires: Sun, 07 Jul 2024 08:51:36 GMT
Date: Sun, 07 Jul 2024 03:30:26 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash508d0867e7982df7cfa6ad58e05ce470 6f4e15b94e527d02e8dd38f8b69b493cfae84c56 376a5286b71a4a7e90b3eece9b39480f50435d5ef3c7793828481f590d04bc77
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "376A5286B71A4A7E90B3EECE9B39480F50435D5EF3C7793828481F590D04BC77"
Last-Modified: Thu, 04 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7594
Expires: Sun, 07 Jul 2024 05:37:01 GMT
Date: Sun, 07 Jul 2024 03:30:27 GMT
Connection: keep-alive
|
|
| | 185.75.253.104 | 200 OK | 1.3 kB |
URL User Request GET HTTP/1.1IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeHTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Hashfa4454dc5f442aec89dfc6182609c823 decfae3bf2593f58daf16e8d96a164977e7879d8 b21ef0b238068203ac18a1febf5a4bfd132ca480db499e8b6ba77d8dd4f90e25
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET / HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: text/html
last-modified: Mon, 03 Jun 2024 11:22:46 GMT
transfer-encoding: chunked
etag: W/"665da786-c0d"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-z: ded7017
content-encoding: gzip
x-man: 5
x-bcs-bl: 102
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash223ffc40cc96a2aa59687065c089ccfc 6bc7fa694691bdca752335ecf0f7268bf2c908d5 1a1d7236b0738f65d98e772f67be883f477ac175767f971800a6bb3997399811
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1A1D7236B0738F65D98E772F67BE883F477AC175767F971800A6BB3997399811"
Last-Modified: Thu, 04 Jul 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18308
Expires: Sun, 07 Jul 2024 08:35:35 GMT
Date: Sun, 07 Jul 2024 03:30:27 GMT
Connection: keep-alive
|
|
| GET bongacams.su/css1/style.css | 185.75.253.104 | 200 OK | 1.6 kB |
URL GET HTTP/1.1bongacams.su/css1/style.css IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeASCII text, with CRLF line terminators Hash5649d42616c87aa5eee2f824d8ae9a85 7e2eee56f373b1d5bcb323481cb8de873ff85534 86b9b8552591a1ce935e4c8dcbf5a35b5a12ce79e123764d1173561b1d15d651
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /css1/style.css HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: text/css
last-modified: Fri, 27 Jan 2017 17:44:12 GMT
transfer-encoding: chunked
etag: W/"588b86ec-134d"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
content-encoding: gzip
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/js/device.min.js | 185.75.253.104 | 200 OK | 1.1 kB |
URL GET HTTP/1.1bongacams.su/js/device.min.js IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeJavaScript source, ASCII text, with very long lines (3272) Hash719c963c2ea823af63d9d27cad324477 98d5079895cadb6b42e4379df565d8ad7dd44e36 eff979b9e48677d58bca83cbe1c830ed046b4bd567a2a03d8030981c6654bf2f
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /js/device.min.js HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: application/javascript
last-modified: Thu, 19 Jan 2017 17:44:42 GMT
transfer-encoding: chunked
etag: W/"5880fb0a-ce0"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
content-encoding: gzip
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/js/script.js | 185.75.253.104 | 200 OK | 200 B |
URL GET HTTP/1.1bongacams.su/js/script.js IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeJavaScript source, ASCII text, with CRLF line terminators Hash3548cc39dac3d0a4e9687cbf33a409e9 a438b4406ae6861a1e792c5695c6d231af59e3f3 2d62251caa52bdf7f7d0ef5de48a21aaf26aaa1349c93efacb850ac3114cf6d9
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /js/script.js HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2017 07:21:06 GMT
transfer-encoding: chunked
etag: W/"587dc5e2-281"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
content-encoding: gzip
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/js/jquery-3.1.1.min.js | 185.75.253.104 | 200 OK | 30 kB |
URL GET HTTP/1.1bongacams.su/js/jquery-3.1.1.min.js IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /js/jquery-3.1.1.min.js HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2017 06:15:42 GMT
transfer-encoding: chunked
etag: W/"587db68e-152b5"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
content-encoding: gzip
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/atimages/screen-mobile.jpg | 185.75.253.104 | 200 OK | 221 kB |
URL GET HTTP/1.1bongacams.su/atimages/screen-mobile.jpg IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 591x958, components 3 Size221 kB (221412 bytes) Hash3a3005dfe8ef68024c5f748ca8abfa76 402c032124bbbd472d9355b05ad937cbf8e09e80 5db209cf978bfc390a9e116ec781c1534626333ce3c22ab8272468b77f62c861
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /atimages/screen-mobile.jpg HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: image/jpeg
content-length: 221412
last-modified: Mon, 16 Jan 2017 16:18:50 GMT
etag: "587cf26a-360e4"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
accept-ranges: bytes
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/atimages/atde.png | 185.75.253.104 | 200 OK | 407 kB |
URL GET HTTP/1.1bongacams.su/atimages/atde.png IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typePNG image data, 560 x 448, 8-bit/color RGB, non-interlaced Size407 kB (407388 bytes) Hash02b0a7b86fc677788657afd20a14edf2 5ff1256f8eafee50cb350243242d4e9f1d1f012b de4c78ecc07c67757260197481bfa826f2bcaa4699eac764840eeae19dabcdbf
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /atimages/atde.png HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: image/png
content-length: 407388
last-modified: Fri, 27 Jan 2017 17:23:22 GMT
etag: "588b820a-6375c"
expires: Tue, 06 Aug 2024 03:30:27 GMT
cache-control: max-age=2592000
x-whom: web-01
accept-ranges: bytes
x-man: 5
x-bcs-bl: 102
|
|
| GET bongacams.su/favicon.ico | 185.75.253.104 | 200 OK | 15 kB |
IP 185.75.253.104:80
ASN#48684 Viking Host B.V.
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hash8725d8706750ab8b4c8ce37d36fd59f5 aa714fdf4c565cf98d001766bf8e77d69253491c b8b9be205c823053ff96c95f02b874f3fb2ffe53e3b344dfe7d1b023bdd1531b
NIDS | Severity | Alert | suricata | medium | ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related |
GET /favicon.ico HTTP/1.1
Host: bongacams.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bongacams.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Sun, 07 Jul 2024 03:30:27 GMT
content-type: image/x-icon
content-length: 15086
last-modified: Tue, 26 Dec 2023 06:53:03 GMT
etag: "658a784f-3aee"
x-bc: ded7851
accept-ranges: bytes
x-man: 5
x-bcs-bl: 102
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18611
Expires: Sun, 07 Jul 2024 08:40:40 GMT
Date: Sun, 07 Jul 2024 03:30:29 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18611
Expires: Sun, 07 Jul 2024 08:40:40 GMT
Date: Sun, 07 Jul 2024 03:30:29 GMT
Connection: keep-alive
|
|