Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| api.wipmania.com | 212.83.168.196 |
GET
200
http://api.wipmania.com/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36
Host: api.wipmania.com
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 May 2021 02:12:16 GMT
Content-Type: text/html
Content-Length: 21
Connection: keep-alive
Keep-Alive: timeout=20
GET
200
http://api.wipmania.com/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36
Host: api.wipmania.com
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 May 2021 02:12:31 GMT
Content-Type: text/html
Content-Length: 21
Connection: keep-alive
Keep-Alive: timeout=20
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 192.168.56.102:49807 -> 212.83.168.196:80 | 2014304 | ET POLICY External IP Lookup Attempt To Wipmania | Device Retrieving External IP Address Detected |
| TCP 192.168.56.102:49809 -> 212.83.168.196:80 | 2014304 | ET POLICY External IP Lookup Attempt To Wipmania | Device Retrieving External IP Address Detected |
| TCP 149.56.45.200:9030 -> 192.168.56.102:49812 | 2522180 | ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 181 | Misc Attack |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts