Report - yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin

Report Overview

Submitted URL
yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin
IP
114.80.179.242
ASN
#4812 China Telecom Group
Submitted
2024-04-18 09:00:50
Access
public
Website Title
404 Not Found
Final URL
yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yxk.lpjsq.cn	unknown	2018-10-02	2022-11-18	2024-03-31	848 B	1.6 kB	61.170.81.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 09:00:26	medium	180.163.207.103	Client IP	ET INFO TLS Handshake Failure
2024-04-18 09:00:26	medium	61.170.81.233	Client IP	ET INFO TLS Handshake Failure
2024-04-18 09:00:27	medium	61.170.81.233	Client IP	ET INFO TLS Handshake Failure
2024-04-18 09:00:27	medium	180.163.207.103	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin	61.170.81.233		258 B
URL User Request GET yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin IP 61.170.81.233:0 ASN #4812 China Telecom Group File type HTML document, ASCII text Size 258 B (258 bytes) Hash d65bafc60d01077d6ce36dbc033e95d7 d19eea7204214fd6be7aeafbd30a7949033dae2f b928b43d3250c0d58fe8c4c06c442bd31806ef51633c0764d9782527defdb09f HTTP Headers `GET /lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin HTTP/1.1 Host: yxk.lpjsq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Server: Tengine Content-Type: text/html; charset=iso-8859-1 Content-Length: 258 Connection: keep-alive Date: Thu, 18 Apr 2024 09:00:06 GMT Ali-Swift-Global-Savetime: 1713430828 Via: cache51.l2cn3160[31,31,404-1280,M], cache24.l2cn3160[32,0], vcache7.cn6013[42,42,404-1280,M], vcache25.cn6013[47,0] X-Cache: MISS TCP_MISS dirn:-2:-2 X-Swift-Error: orig response 4XX error X-Swift-SaveTime: Thu, 18 Apr 2024 09:00:28 GMT X-Swift-CacheTime: 1 Timing-Allow-Origin: * EagleId: 3daa512d17134308282735813e

	yxk.lpjsq.cn/favicon.ico	222.73.33.235	404 Not Found	258 B
URL GET HTTP/1.1 yxk.lpjsq.cn/favicon.ico IP 222.73.33.235:80 ASN #4812 China Telecom Group Requested by http://yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin File type HTML document, ASCII text Size 258 B (258 bytes) Hash d65bafc60d01077d6ce36dbc033e95d7 d19eea7204214fd6be7aeafbd30a7949033dae2f b928b43d3250c0d58fe8c4c06c442bd31806ef51633c0764d9782527defdb09f HTTP Headers `GET /favicon.ico HTTP/1.1 Host: yxk.lpjsq.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://yxk.lpjsq.cn/lanpaopz/web/LPAESJD2.binQhttp:/yxk.lpjsq.cn/lanpaopz/web/gfw.bin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Server: Tengine Content-Type: text/html; charset=iso-8859-1 Content-Length: 258 Connection: keep-alive Date: Thu, 18 Apr 2024 09:00:07 GMT Ali-Swift-Global-Savetime: 1713430828 Via: cache43.l2cn3117[68,68,404-1280,M], cache16.l2cn3117[76,0], vcache22.cn5626[108,107,404-1280,M], vcache4.cn5626[109,0] X-Cache: MISS TCP_MISS dirn:-2:-2 X-Swift-Error: orig response 4XX error X-Swift-SaveTime: Thu, 18 Apr 2024 09:00:28 GMT X-Swift-CacheTime: 1 Timing-Allow-Origin: * EagleId: de49211817134308286971227e