URL User Request GET HTTP/1.1 IP 54.39.123.64:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 3526531ccd6c6a1d2340574a305a18f8
07993837ce7f0273a65b20db8ee9b24823da7e1e
b663321ab439cc53a329ee352c1b855d9998d3af95524a05795a88b42a9acf07
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.ocry .com Domain
GET / HTTP/1.1
Host: mn18.esyh1403.ocry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 16:34:57 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Sun, 29 Jan 2023 08:05:20 GMT
ETag: "2aa6-5f3628f536a45-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3138
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
mn18.esyh1403.ocry.com/icons/ubuntu-logo.png
54.39.123.64200 OK 3.3 kB URL GET HTTP/1.1 mn18.esyh1403.ocry.com/icons/ubuntu-logo.png
IP 54.39.123.64:80
Requested by http://mn18.esyh1403.ocry.com/
File type PNG image data, 119 x 99, 8-bit/color RGBA, non-interlaced\012- data
Hash 5bf8c10887a4300160553ff99b3ee00b
21b29d43acd3106347eacd8f3a36a38ad7d330ee
ef6e62d62944c3b838f72816ba8e836fbdb46a8dcfb43ba62a4c387b65306fdb
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.ocry .com Domain
GET /icons/ubuntu-logo.png HTTP/1.1
Host: mn18.esyh1403.ocry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mn18.esyh1403.ocry.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 May 2023 16:34:58 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 08 Mar 2023 17:32:54 GMT
ETag: "d0a-5f666eb0abd80"
Accept-Ranges: bytes
Content-Length: 3338
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
mn18.esyh1403.ocry.com/favicon.ico
54.39.123.64404 Not Found 284 B URL GET HTTP/1.1 mn18.esyh1403.ocry.com/favicon.ico
IP 54.39.123.64:80
Requested by http://mn18.esyh1403.ocry.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2024e024fc06ee4365787ddeaae3cbda
d7a4114c6e93202f0c0863483151ff31c62b6998
1ffd05e3c7cb90b6096d221c051f7b8fff5558f440eb89c606e2f5bfa9eb828d
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.ocry .com Domain
GET /favicon.ico HTTP/1.1
Host: mn18.esyh1403.ocry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mn18.esyh1403.ocry.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 30 May 2023 16:34:58 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 284
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1