Report - wdmjepdata.duckdns.org/

Report Overview

URL

wdmjepdata.duckdns.org/
IP

45.88.168.143

ASN

#35913 DEDIPATH-LLC
Submitted

2023-05-07T23:20:27Z

Access

public
Tags

dyndns
urlquery detections

Suspicious - DynDNS domain

Detections

urlquery

3
Network Intrusion Detection

48
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
wdmjepdata.duckdns.org (2)	unknown	2022-09-13 14:47:50	2023-03-29 16:32:47	752	1340	45.88.168.143

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	medium	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to a *.duckdns .org Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:15Z	low	Client IP	Internal IP	ET INFO DYNAMIC_DNS Query to *.duckdns. Domain
2023-05-07T23:20:16Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:16Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:16Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-07T23:20:16Z	medium	Client IP	45.88.168.143	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-07	medium	wdmjepdata.duckdns.org/

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

wdmjepdata.duckdns.org/

45.88.168.143

200 OK

785

URL User Request GET HTTP/1.1

wdmjepdata.duckdns.org/
IP

45.88.168.143:80
ASN

#35913 DEDIPATH-LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text

Size

785
Hash

3773e122b31940e47cec1e43257a6b17

352cacc681aae7a7c1e7b3467c75bd7a9f75e343

cdf9d8eee8c4fe967fac3aa9218a7227647ae7aaaa4221c688e1aab7a9180f69

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

HTTP Headers

                                        GET / HTTP/1.1
Host: wdmjepdata.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Sun, 07 May 2023 23:20:11 GMT
Content-Type: text/html
Last-Modified: Wed, 26 Apr 2017 08:03:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"59005463-52e"
Content-Encoding: gzip

wdmjepdata.duckdns.org/favicon.ico

45.88.168.143

404 Not Found

146

URL GET HTTP/1.1

wdmjepdata.duckdns.org/favicon.ico
IP

45.88.168.143:80
ASN

#35913 DEDIPATH-LLC

Requested by

http://wdmjepdata.duckdns.org/

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

146
Hash

8eec510e57f5f732fd2cce73df7b73ef

3c0af39ecb3753c5fee3b53d063c7286019eac3b

55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: wdmjepdata.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdmjepdata.duckdns.org/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 07 May 2023 23:20:12 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

Detections

HTTP Headers