Report - api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage

Report Overview

Submitted URL
api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage
IP
149.154.167.220
ASN
#62041 Telegram Messenger Inc
Submitted
2024-04-19 09:05:00
Access
public
Website Title
api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage
Final URL
api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.telegram.org	38509	2003-12-15	2015-06-25	2024-04-17	1.1 kB	846 B	149.154.167.220

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 09:04:34	low	Client IP	149.154.167.220	ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage	149.154.167.220	400 Bad Request	80 B
URL User Request GET HTTP/2 api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage IP 149.154.167.220:443 ASN #62041 Telegram Messenger Inc Certificate IssuerGoDaddy.com, Inc. Subjectapi.telegram.org Fingerprint1F:77:5F:20:C5:D3:BD:67:DE:E8:07:9B:59:1D:22:E9:C0:E4:52:4B ValiditySun, 24 Mar 2024 13:08:48 GMT - Fri, 25 Apr 2025 13:08:48 GMT File type JSON text data Size 80 B (80 bytes) Hash 3fa187421b5a45709b21c348556b4a6a f44809b9aaa680ae2bd9952deee31f85fed9ffb1 badde82fd2ca7c7b153ec29aaabd4e9a370a953ff2c0591dfb19b4521d4ae518 HTTP Headers GET /bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage HTTP/1.1 Host: api.telegram.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 400 Bad Request server: nginx/1.18.0 date: Fri, 19 Apr 2024 09:04:34 GMT content-type: application/json content-length: 80 strict-transport-security: max-age=31536000; includeSubDomains; preload access-control-allow-origin: * access-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection X-Firefox-Spdy: h2`

	api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage	149.154.167.220	400 Bad Request	80 B
URL User Request GET HTTP/2 api.telegram.org/bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage IP 149.154.167.220:443 ASN #62041 Telegram Messenger Inc Certificate IssuerGoDaddy.com, Inc. Subjectapi.telegram.org Fingerprint1F:77:5F:20:C5:D3:BD:67:DE:E8:07:9B:59:1D:22:E9:C0:E4:52:4B ValiditySun, 24 Mar 2024 13:08:48 GMT - Fri, 25 Apr 2025 13:08:48 GMT File type JSON text data Size 80 B (80 bytes) Hash 3fa187421b5a45709b21c348556b4a6a f44809b9aaa680ae2bd9952deee31f85fed9ffb1 badde82fd2ca7c7b153ec29aaabd4e9a370a953ff2c0591dfb19b4521d4ae518 HTTP Headers GET /bot7075979319:AAHNyiU09NAE454UgWJANGrZRKh8jI6NDt8/sendMessage HTTP/1.1 Host: api.telegram.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 400 Bad Request server: nginx/1.18.0 date: Fri, 19 Apr 2024 09:04:34 GMT content-type: application/json content-length: 80 strict-transport-security: max-age=31536000; includeSubDomains; preload access-control-allow-origin: * access-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection X-Firefox-Spdy: h2`