Report - 31.28.24.250:22350/

Report Overview

Submitted URL
31.28.24.250:22350/
IP
31.28.24.250
ASN
#12616 Citytelecom LLC
Submitted
2024-05-07 14:55:52
Access
public
Website Title
CodeMeter | WebAdmin
Final URL
31.28.24.250:22350/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
31.28.24.250:22350	unknown	unknown	No data	No data	2.8 kB	31 kB	31.28.24.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed
2024-05-07	medium	31.28.24.250	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	31.28.24.250:22350/	0 B	2023-03-07	2024-05-19
Pretty URL 31.28.24.250:22350/ IP 31.28.24.250 ASN #12616 Citytelecom LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-19 17:31:12 Times Seen37836363 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	8 B	2023-04-17	2024-05-17
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-17 20:47:47 Last Seen2024-05-17 18:40:11 Times Seen78 Hash 3356279bd0a0b93fe7fcb998850b69c4 cb7ee2d0abf221e239640ed0a817e8890f020d59 5d1efc1b21e1a183a10865f2336f05ad7f086fca9269c2091c2bf8cc6c9a8d1f Loading...

	31.28.24.250:22350/Common.js	1.7 kB	2024-05-07	2024-05-07
Pretty URL 31.28.24.250:22350/Common.js IP 31.28.24.250 ASN #12616 Citytelecom LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 16:55:58 Last Seen2024-05-07 16:55:58 Times Seen1 Hash 28e30f618948f7fa1ee37b730fa43599 e5da9ddddd0757897a8ee3898f222ab8652afa57 15704bc775aaff18a958f6a90abe6a1bc9f3b0b00f1696057a8d5b8dc31670c2 Loading...

HTTP Transactions (8)

URL IP Response Size

31.28.24.250:22350/

31.28.24.250

200 OK

4.3 kB

URL User Request GET HTTP/1.1
31.28.24.250:22350/
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
4.3 kB (4275 bytes)
Hash
ea3d93e3b52ef2ccdb4745cb84340bee
47b18a01dfa23477b1b871bea0e73d1c891988e0
fe72cbee3294a4b867879520053cc37503177a3b6eee7b1b744257ae462fd6b8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:33 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Accept-Ranges: bytes
Content-Length: 4275

31.28.24.250:22350/Common.js

31.28.24.250

200 OK

1.7 kB

URL GET HTTP/1.1
31.28.24.250:22350/Common.js
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
1.7 kB (1716 bytes)
Hash
9a7d71c029c939ecb167715f043b4aaa
36481338b6dfc988425951b923d16e67c984acc8
2920691a14d82047a6ac01771e0b386b256818bd45dc05b6fb57675248f5fa69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Common.js HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:33 GMT
Connection: close
Content-Type: application/x-javascript
Accept-Ranges: bytes
Content-Length: 1716

31.28.24.250:22350/Style.css

31.28.24.250

200 OK

7.0 kB

URL GET HTTP/1.1
31.28.24.250:22350/Style.css
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
ASCII text, with CRLF line terminators
Size
7.0 kB (7022 bytes)
Hash
c56eb677cd6f4833fbfbacb8c64600ef
c7a73d04c3adb1fefbea82dcede0004fde772dc2
fa6708d4533abe169937e3d70425877a834abfd9afcb39dd28224cd131790ae5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Style.css HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:33 GMT
Connection: close
Content-Type: text/css
Accept-Ranges: bytes
Content-Length: 7022

31.28.24.250:22350/favicon.ico

31.28.24.250

200 OK

241 B

URL GET HTTP/1.1
31.28.24.250:22350/favicon.ico
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
Size
241 B (241 bytes)
Hash
3d5acc7a8450f64c0a1051e9f2c8f912
681aa2e168f4591f91502478f91dfcc0c299a308
9a3b70c5a0846b24c29e088075eaae52957740a04f20c534cbd731e9d07a2adb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:34 GMT
Connection: close
Content-Type: text/plain
Accept-Ranges: bytes
Content-Length: 241

31.28.24.250:22350/images/menueonly.gif

31.28.24.250

200 OK

289 B

URL GET HTTP/1.1
31.28.24.250:22350/images/menueonly.gif
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
GIF image data, version 89a, 2 x 51
Size
289 B (289 bytes)
Hash
e328c40e8bb71d65d41e639480852421
af82f78cb3aafa69d1e3ac8e9a96ba79eab3a759
5be383c2be97c853d5532741c769c33ece0bbe2340e58e3097ef1b678c3a37bf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/menueonly.gif HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/Style.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:34 GMT
Connection: close
Content-Type: image/gif
Accept-Ranges: bytes
Content-Length: 289

31.28.24.250:22350/images/button.gif

31.28.24.250

200 OK

99 B

URL GET HTTP/1.1
31.28.24.250:22350/images/button.gif
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
GIF image data, version 89a, 1 x 22
Size
99 B (99 bytes)
Hash
ada7c9f7749ec6655a5d010e197bd19f
7e58d02844c054eb98d19a3bb0bf8afef2ec9b3b
d5fc59ee34f5e16405a51075a0071abc010e2aa9530cce6af9d4dbe7236e071e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/button.gif HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/Style.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:34 GMT
Connection: close
Content-Type: image/gif
Accept-Ranges: bytes
Content-Length: 99

31.28.24.250:22350/images/footer.gif

31.28.24.250

200 OK

96 B

URL GET HTTP/1.1
31.28.24.250:22350/images/footer.gif
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
GIF image data, version 89a, 1 x 18
Size
96 B (96 bytes)
Hash
292e8af22713dca70dad0934412d9acb
162ee989a4a083b9f9cf3c64de1ab3b8d8a3e3b0
a1c265b187e1e9ca3521c782ec0aeffbadee83c9143761f78f6810f0090eb6bb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/footer.gif HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/Style.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:34 GMT
Connection: close
Content-Type: image/gif
Accept-Ranges: bytes
Content-Length: 96

31.28.24.250:22350/images/head.png

31.28.24.250

200 OK

16 kB

URL GET HTTP/1.1
31.28.24.250:22350/images/head.png
IP
31.28.24.250:22350
ASN
#12616 Citytelecom LLC

Requested by
http://31.28.24.250:22350/

File type
PNG image data, 776 x 89, 8-bit colormap, non-interlaced
Size
16 kB (15495 bytes)
Hash
234c6dde24575a00f77c497dde1f2287
ead8405d527a15510712fd188a961963ca8d822f
1e121b8c08e54dbfd9417c7daadc4750f864399de36dc752eccf3923d43c2adf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/head.png HTTP/1.1
Host: 31.28.24.250:22350
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://31.28.24.250:22350/Style.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: WIBU-SYSTEMS HTTP Server/ ������ 3.00 ��� ���/24/2012
Date: 2024-05-07 14:55:34 GMT
Connection: close
Content-Type: image/png
Accept-Ranges: bytes
Content-Length: 15495

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers