Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
- UDP Requests
-
-
192.168.56.101:62324 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49152 239.255.255.250:3702
-
192.168.56.101:62325 239.255.255.250:3702
-
192.168.56.101:62445 239.255.255.250:1900
-
192.168.56.101:62447 239.255.255.250:3702
-
192.168.56.101:62449 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.101:123
-
GET
200
https://46.99.175.149/top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/
REQUEST
RESPONSE
BODY
GET /top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/ HTTP/1.1
Connection: Keep-Alive
User-Agent: curl/7.76.0
Host: 46.99.175.149
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 11 Aug 2021 00:27:42 GMT
Content-Type: application/octet-stream
Content-Length: 224
Connection: keep-alive
GET
200
https://45.36.99.184/top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/
REQUEST
RESPONSE
BODY
GET /top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/ HTTP/1.1
Connection: Keep-Alive
User-Agent: curl/7.76.0
Host: 45.36.99.184
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 11 Aug 2021 00:27:44 GMT
Content-Type: application/octet-stream
Content-Length: 224
Connection: keep-alive
GET
200
https://185.56.175.122/top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/
REQUEST
RESPONSE
BODY
GET /top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/ HTTP/1.1
Connection: Keep-Alive
User-Agent: curl/7.76.0
Host: 185.56.175.122
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Wed, 11 Aug 2021 00:27:47 GMT
Content-Type: application/octet-stream
Content-Length: 224
Connection: keep-alive
GET
200
https://128.201.76.252/top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/
REQUEST
RESPONSE
BODY
GET /top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/ HTTP/1.1
Connection: Keep-Alive
User-Agent: curl/7.76.0
Host: 128.201.76.252
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 11 Aug 2021 00:27:50 GMT
Content-Type: application/octet-stream
Content-Length: 224
Connection: keep-alive
GET
200
https://216.166.148.187/top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/
REQUEST
RESPONSE
BODY
GET /top111/TEST22-PC_W617601.511F739DF11CD53BB8613D8ECFB9F3D1/5/file/ HTTP/1.1
Connection: Keep-Alive
User-Agent: curl/7.76.0
Host: 216.166.148.187
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 11 Aug 2021 00:27:54 GMT
Content-Type: application/octet-stream
Content-Length: 224
Connection: keep-alive
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.101:49202 46.99.175.149:443 |
C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | b5:21:a8:16:d5:97:b1:67:f6:60:a5:cb:20:27:76:ec:3c:9d:3b:02 |
|
TLSv1 192.168.56.101:49205 128.201.76.252:443 |
C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | b5:21:a8:16:d5:97:b1:67:f6:60:a5:cb:20:27:76:ec:3c:9d:3b:02 |
|
TLSv1 192.168.56.101:49206 216.166.148.187:443 |
C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | b5:21:a8:16:d5:97:b1:67:f6:60:a5:cb:20:27:76:ec:3c:9d:3b:02 |
|
TLSv1 192.168.56.101:49203 45.36.99.184:443 |
C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | b5:21:a8:16:d5:97:b1:67:f6:60:a5:cb:20:27:76:ec:3c:9d:3b:02 |
|
TLSv1 192.168.56.101:49204 185.56.175.122:443 |
C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd | 50:fd:fd:4e:2c:57:ea:f7:c9:cd:3f:61:4a:a2:40:01:1b:b8:df:02 |
Snort Alerts
No Snort Alerts