IP 192.229.221.95:0
Hash 48a306729c217b9998d37910c43d782b
00e52ecd221b4c35206c3bf91cedcb5b1bff6824
d0f3a931f85667808a7796f28432c270ba4dc4b79d26ec7989850ad12640e40c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 04:56:30 GMT
Etag: "6472e2de-1d7"
Expires: Mon, 29 May 2023 06:56:30 GMT
Last-Modified: Sun, 28 May 2023 05:13:02 GMT
Server: nginx
Content-Length: 471
URL User Request GET HTTP/1.1 IP 116.205.146.187:80
ASN #55990 Huawei Cloud Service data center
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET INFO Unconfigured nginx Access
GET / HTTP/1.1
Host: sywzss.kunming.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Server: CloudWAF
Date: Mon, 29 May 2023 04:56:30 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=e79d473a02731f24ec; path=/
HWWAFSESTIME=1685336190553; path=/
URL User Request GET HTTP/1.1 IP 139.159.208.113:80
ASN #55990 Huawei Cloud Service data center
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e3eb0a1df437f3f97a64aca5952c8ea0
7dd71afcfb14e105e80b0c0d7fce370a28a41f0a
38ffd4972ae513a0c79a8be4573403edcd709f0f572105362b08ff50cf6de521
NIDS Severity Alert suricata medium ET INFO Unconfigured nginx Access
GET / HTTP/1.1
Host: sywzss.kunming.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: HWWAFSESID=e79d473a02731f24ec; HWWAFSESTIME=1685336190553
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: CloudWAF
Date: Mon, 29 May 2023 04:56:31 GMT
Content-Type: text/html
Content-Length: 612
Connection: keep-alive
Last-Modified: Thu, 11 Jun 2020 03:13:34 GMT
ETag: "5ee1a15e-264"
Set-Cookie: HttpOnly
Secure
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
sywzss.kunming.cn/favicon.ico
139.159.208.113404 Not Found 146 B URL GET HTTP/1.1 sywzss.kunming.cn/favicon.ico
IP 139.159.208.113:80
ASN #55990 Huawei Cloud Service data center
Requested by http://sywzss.kunming.cn/
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cc6d3e28ff17fe45083af26c3d2bb0a0
a004ab7d5b17f15f805ec533bb6cb5db02ce62c0
813c9fc265ac600583b5ec47e5b1c783845c76a6bb1db15dcf41bfa1fe6e58cd
GET /favicon.ico HTTP/1.1
Host: sywzss.kunming.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://sywzss.kunming.cn/
Cookie: HWWAFSESID=e79d473a02731f24ec; HWWAFSESTIME=1685336190553; Secure
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: CloudWAF
Date: Mon, 29 May 2023 04:56:31 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive