Iodine DNS Tunneling
Tags
attack-pattern: Data Direct Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Connection Proxy - T1090 Sudo - T1169
Show in Graph
Common Information
Type Value
UUID fbd9579e-6f8d-4ef2-8560-0b736db58c16
Fingerprint acffffdbab632dd7
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 20, 2016, midnight
Added to db Jan. 19, 2023, 12:13 a.m.
Last updated Nov. 17, 2024, 6:50 p.m.
Headline UNKNOWN
Title Iodine DNS Tunneling
Detected Hints/Tags/Attributes 29/1/12
Source URLs
Redirection Url
Details Source http://www.h-i-r.net/2016/10/iodine-dns-tunneling.html
URL Provider
Details Provider Source level domain
Details h-i-r.net www.h-i-r.net
Attributes
Details Type #Events CTI Value
Details Domain 4 
h-i-r.net
Details Domain 1 
tn.h-i-r.net
Details Domain 2 
generic.mp
Details Domain 2 
www.h-i-r.net
Details Domain 9 
www.blogger.com
Details Domain 17 
apis.google.com
Details IPv4 13 
172.16.0.1
Details IPv4 81 
172.16.0.0
Details IPv4 27 
208.67.222.222
Details IPv4 3 
172.16.0.2
Details IPv4 1 
168.235.84.117
Details IPv4 1441 
127.0.0.1