Report - 13.107.42.16/

Report Overview

Visited public
2024-01-22 11:22:49
Tags
Submit Tags
URL
13.107.42.16/
Finishing URL
13.107.42.16/
IP / ASN
13.107.42.16
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Title
13.107.42.16/

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
13.107.42.16	unknown	unknown	2018-11-07 19:47:29	2023-12-25 18:12:04	718 B	716 B	13.107.42.16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-01-22	medium	13.107.42.16	Sinkholed
2024-01-22	medium	13.107.42.16	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

13.107.42.16/

13.107.42.16

194 B

URL
13.107.42.16/
IP
13.107.42.16:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with no line terminators
Size
194 B (194 bytes)
Hash
70c2ee52fd98e39aad526d7f7f4ae391
990a93c878e78b5708dc7d6ef58defca52fcfac7
deb9f74c13d2f9e6477211fdb4e19983e55e0dff93b112a49590341580fb0b3c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 13.107.42.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 400 Bad Request
Transfer-Encoding: chunked
X-MSEdge-Ref: 08E+uZQAAAAAayZN4e/UBRakP+vtuxv+8T1NMMzBFREdFMDExNABFZGdl
Date: Mon, 22 Jan 2024 11:22:23 GMT

GET 13.107.42.16/favicon.ico

13.107.42.16

400 Bad Request

194 B

URL GET HTTP/1.1
13.107.42.16/favicon.ico
IP
13.107.42.16:80
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
http://13.107.42.16/

File type
ASCII text, with no line terminators
Size
194 B (194 bytes)
Hash
0cbbeee33fa514c34fc3983b3116ade9
b208e09777a76991f2d4299aedd241e71150a91b
f5f0b9234ed871bfcd6d352e2c45bc84849633112ea2b25cc3ccecbf42b8a444

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 13.107.42.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://13.107.42.16/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 400 Bad Request
Transfer-Encoding: chunked
X-MSEdge-Ref: 08E+uZQAAAADKziGMUaafQr+yWO37F6xpT1NMMzBFREdFMDExNABFZGdl
Date: Mon, 22 Jan 2024 11:22:24 GMT

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers