Report - kalisepanel.ddnsking.com/ibotmdb/api/auth

Report Overview

Visited public
2025-02-14 13:45:57
Tags
dyndns
Submit Tags
URL
kalisepanel.ddnsking.com/ibotmdb/api/auth
Finishing URL
kalisepanel.ddnsking.com/ibotmdb/api/auth
IP / ASN
45.136.16.140
#51167 Contabo GmbH
Title
kalisepanel.ddnsking.com/ibotmdb/api/auth
Suspicious - DynDNS domain

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kalisepanel.ddnsking.com	unknown	2014-05-08	2025-01-01	2025-01-01	810 B	67 kB	45.136.16.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-14 13:45:27	medium	Client IP	45.136.16.140	ET INFO DYNAMIC_DNS HTTP Request to a *.ddnsking .com Domain
2025-02-14 13:45:27	medium	Client IP	45.136.16.140	ET INFO DYNAMIC_DNS HTTP Request to a *.ddnsking .com Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

kalisepanel.ddnsking.com/ibotmdb/api/auth

45.136.16.140

200 OK

66 kB

URL
kalisepanel.ddnsking.com/ibotmdb/api/auth
IP
45.136.16.140:0
ASN
#51167 Contabo GmbH

File type
JSON text data
Size
66 kB (66133 bytes)
Hash
68fb4841ac40fde6ea98a9fe41436cf6
91b90d9cdc3474184a16cd5e2ed72cdfc251acf2
39beecf55fe88aed7439221980ba954717248e840769df1f788bf53ec979ff03

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.ddnsking .com Domain

HTTP Headers

GET /ibotmdb/api/auth HTTP/1.1
Host: kalisepanel.ddnsking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 14 Feb 2025 13:45:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

kalisepanel.ddnsking.com/favicon.ico

45.136.16.140

404 Not Found

286 B

URL
kalisepanel.ddnsking.com/favicon.ico
IP
45.136.16.140:0
ASN
#51167 Contabo GmbH

File type
HTML document, ASCII text
Size
286 B (286 bytes)
Hash
8d8bbcf615eee7049b9ce5a5b33341e4
d81dba0d87d07a698cde09e00b1d1570ac804858
5d66342deb0263354773abb5f5be6653ea549e48e18705c47d98dc889c5a2ed1

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.ddnsking .com Domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: kalisepanel.ddnsking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kalisepanel.ddnsking.com/ibotmdb/api/auth
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 14 Feb 2025 13:45:27 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 286
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers