| www.3322.org/dyndns/getip |  0.0.0.0 | | 0 B |
URL User Request GET www.3322.org/dyndns/getip IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY External IP Lookup via 3322 .org | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a 3322.net Domain *.3322.org | | suricata | low | ETPRO POLICY DynDNS IP Check getip |
GET /dyndns/getip HTTP/1.1
Host: www.3322.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
| www.3322.org/dyndns/getip |  118.184.169.48 | 200 OK | 13 B |
URL User Request GET www.3322.org/dyndns/getip IP118.184.169.48:80 ASN#23650 AS Number for CHINANET jiangsu province backbone
Hashd0f727049a6c39e00df33badfc529120 bcbe610cd9d4baf88e53c32375c624b8920fb570 4b3f1dd9b6a31b14247dec82b502a00a71d83ebb9f007bfccf7bd490e1604821
| NIDS | Severity | Alert |
|---|
| suricata | high | ET POLICY External IP Lookup via 3322 .org | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a 3322.net Domain *.3322.org | | suricata | low | ETPRO POLICY DynDNS IP Check getip |
GET /dyndns/getip HTTP/1.1
Host: www.3322.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Thu, 17 Apr 2025 09:13:46 GMT
content-type: text/plain; charset=utf-8
transfer-encoding: chunked
vary: Accept-Encoding
content-encoding: gzip
|
IP118.184.169.48:80 ASN#23650 AS Number for CHINANET jiangsu province backbone
Requested byhttp://www.3322.org/dyndns/getip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a 3322.net Domain *.3322.org |
GET /favicon.ico HTTP/1.1
Host: www.3322.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.3322.org/dyndns/getip
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
server: nginx
date: Thu, 17 Apr 2025 09:13:46 GMT
content-type: text/html
content-length: 162
location: https://www.pubyun.com/favicon.ico
|
| www.pubyun.com/favicon.ico | 118.184.169.32 | 301 Moved Permanently | 894 B |
URL GET www.pubyun.com/favicon.ico IP118.184.169.32:443 ASN#23650 AS Number for CHINANET jiangsu province backbone
Requested byhttp://www.3322.org/dyndns/getip CertificateIssuerLet's Encrypt Subjectpubyun.com Fingerprint1D:55:5E:52:D2:BB:41:99:D4:03:BB:C6:66:D2:BC:9D:DF:45:9D:82 ValidityThu, 06 Mar 2025 13:40:57 GMT - Wed, 04 Jun 2025 13:40:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.pubyun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.3322.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 17 Apr 2025 09:13:47 GMT
content-type: text/html
content-length: 162
location: http://img.pubyun.com/favicon.ico
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
| img.pubyun.com/favicon.ico | 118.184.169.32 | 200 OK | 894 B |
URL GET img.pubyun.com/favicon.ico IP118.184.169.32:80 ASN#23650 AS Number for CHINANET jiangsu province backbone
Requested byhttp://www.3322.org/dyndns/getip
File typeMS Windows icon resource - 1 icon, 16x16, 24 bits/pixel Hash664ac747e162aa204c869e395b323ec9 6600ffa273d88061bd24eeea5134cd6a87fc2203 7a3b0f82fd037caf7d1e531f27b263229d90291f4ad24ca4e32e32ea1174e99f
GET /favicon.ico HTTP/1.1
Host: img.pubyun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.3322.org/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Apr 2025 09:13:48 GMT
Content-Type: image/x-icon
Content-Length: 894
Connection: keep-alive
Last-Modified: Thu, 20 Sep 2012 03:49:54 GMT
ETag: "505a9262-37e"
Expires: Sat, 17 May 2025 09:13:48 GMT
Pragma: public
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
|