Extracting 'HTTP CONNECT' Requests with Python - SANS Internet Storm Center
Tags
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Python - T1059.006 Tool - T1588.002 Connection Proxy - T1090 |
Common Information
| Type | Value |
|---|---|
| UUID | a4cdd6c7-1bef-4aac-9a16-6898b2cf3771 |
| Fingerprint | b4fb9f5770ccf0d2 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 14, 2022, midnight |
| Added to db | Oct. 24, 2023, 1:35 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | Internet Storm Center |
| Title | Extracting 'HTTP CONNECT' Requests with Python - SANS Internet Storm Center |
| Detected Hints/Tags/Attributes | 19/1/30 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://isc.sans.edu/diary/rss/29246 |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | 28sex.com |
|
| Details | Domain | 1 | beo555.co |
|
| Details | Domain | 1 | beo333.com |
|
| Details | Domain | 1 | h5.xhlax.com |
|
| Details | Domain | 1 | www.korims.com |
|
| Details | Domain | 1 | www.serruriervaud.ch |
|
| Details | Domain | 1 | share.nuox.top |
|
| Details | Domain | 1 | keokeo.top |
|
| Details | Domain | 23 | www.rfc-editor.org |
|
| Details | Domain | 4 | docs.zeek.org |
|
| Details | File | 1 | http_connect_info.csv |
|
| Details | File | 14 | http.log |
|
| Details | File | 1 | rfc9110.html |
|
| Details | File | 17 | about.html |
|
| Details | File | 816 | index.html |
|
| Details | IPv4 | 1 | 142.202.242.113 |
|
| Details | IPv4 | 1 | 69.30.246.66 |
|
| Details | IPv4 | 1 | 204.12.248.130 |
|
| Details | IPv4 | 1 | 65.109.19.42 |
|
| Details | IPv4 | 1 | 209.222.97.249 |
|
| Details | IPv4 | 1 | 69.30.243.18 |
|
| Details | IPv4 | 1 | 172.93.100.135 |
|
| Details | IPv4 | 1 | 142.202.243.109 |
|
| Details | IPv4 | 1 | 104.251.122.239 |
|
| Details | IPv4 | 1 | 167.99.176.180 |
|
| Details | IPv4 | 1 | 109.237.111.71 |
|
| Details | IPv4 | 1 | 18.140.35.119 |
|
| Details | Url | 1 | https://www.rfc-editor.org/rfc/rfc9110.html#name |
|
| Details | Url | 1 | https://docs.zeek.org/en/master/about.html |
|
| Details | Url | 1 | https://docs.zeek.org/en/v3.0.14/examples/logs/index.html |