Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
cdnjs.cloudflare.com | 104.16.19.94 |
- TCP Requests
-
-
192.168.56.103:49170 104.16.18.94:443cdnjs.cloudflare.com
-
192.168.56.103:49171 104.16.18.94:443cdnjs.cloudflare.com
-
192.168.56.103:49174 117.18.232.200:443
-
192.168.56.103:49175 117.18.232.200:443
-
192.168.56.103:49176 117.18.232.200:443
-
192.168.56.103:49177 117.18.232.200:443
-
192.168.56.103:49178 117.18.232.200:443
-
192.168.56.103:49179 117.18.232.200:443
-
192.168.56.103:49183 117.18.232.200:80
-
23.105.131.228:8822 192.168.56.103:49172
-
- UDP Requests
-
-
192.168.56.103:50665 164.124.101.2:53
-
192.168.56.103:53498 164.124.101.2:53
-
192.168.56.103:53893 164.124.101.2:53
-
192.168.56.103:56357 164.124.101.2:53
-
192.168.56.103:58465 164.124.101.2:53
-
192.168.56.103:59437 164.124.101.2:53
-
192.168.56.103:63128 164.124.101.2:53
-
192.168.56.103:137 192.168.56.255:137
-
192.168.56.103:138 192.168.56.255:138
-
192.168.56.103:49152 239.255.255.250:3702
-
192.168.56.103:49168 239.255.255.250:1900
-
192.168.56.103:49170 239.255.255.250:3702
-
192.168.56.103:49172 239.255.255.250:3702
-
192.168.56.103:58466 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.103:123
-
GET
200
https://cdnjs.cloudflare.com/ajax/libs/jszip/3.6.0/jszip.min.js
REQUEST
RESPONSE
BODY
GET /ajax/libs/jszip/3.6.0/jszip.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: cdnjs.cloudflare.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 25 Oct 2021 08:22:57 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 27809
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=30672000
Content-Encoding: gzip
ETag: "606209cf-18328"
Last-Modified: Mon, 29 Mar 2021 17:09:35 GMT
cf-cdnjs-via: cfworker/kv
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
cf-request-id: 09bec610720000351a80143000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
CF-Cache-Status: HIT
Age: 15458020
Expires: Sat, 15 Oct 2022 08:22:57 GMT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yKzVokGQEXxOMv3bG%2FAVHeC4NifIN2aB5NWw7nywEsHV9imwxmpXiJG%2BI3hUwwYv%2BrtDdFBfzqzfK0KRDyzbohdPOqaJMms4Mv6kDHFPveT7yln5ETgdTAMqgUVups2juSw1IV0j"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=15780000
Server: cloudflare
CF-RAY: 6a3a0a435ce161d0-ICN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
https://cdnjs.cloudflare.com/ajax/libs/FileSaver.js/2.0.5/FileSaver.min.js
REQUEST
RESPONSE
BODY
GET /ajax/libs/FileSaver.js/2.0.5/FileSaver.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: cdnjs.cloudflare.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 25 Oct 2021 08:22:58 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 1318
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=30672000
Content-Encoding: gzip
ETag: "5fb68fc1-abd"
Last-Modified: Thu, 19 Nov 2020 15:31:13 GMT
cf-cdnjs-via: cfworker/kv
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
cf-request-id: 0a757bd7a80000a23de7976000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
CF-Cache-Status: HIT
Age: 12392655
Expires: Sat, 15 Oct 2022 08:22:58 GMT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b3dUMDQrdBzkYIe96LVJgpsHiyGKpZVTeBIJ0nmJJ%2BohiYAQhsyXczVLmZlHzPB5alDJkpBQCJw5neYTeGEVY%2BViZJSY2rCb6dJm1vC%2BWWdj8es265r5a9Xk8IXWwSUCzITUqxZz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=15780000
Server: cloudflare
CF-RAY: 6a3a0a474ec40f88-ICN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
GET
200
http://ie9cvlist.ie.microsoft.com/IE9CompatViewList.xml
REQUEST
RESPONSE
BODY
GET /IE9CompatViewList.xml HTTP/1.1
Accept: */*
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Host: ie9cvlist.ie.microsoft.com
If-Modified-Since: Fri, 16 Oct 2020 17:54:09 GMT
If-None-Match: 0x8D871FC7BDF491D
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Encoding: gzip
Age: 10167
Cache-Control: max-age=21600
Content-MD5: p9g4jsuZO6TaLMVAI9ujVg==
Content-Type: text/xml
Date: Mon, 25 Oct 2021 08:23:56 GMT
Etag: 0x8D9521D2D2DF1EC
Last-Modified: Wed, 28 Jul 2021 23:12:31 GMT
Server: ECAcc (tka/897A)
Vary: Accept-Encoding
X-Cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 8d69b06a-701e-00ad-6c61-c9cd68000000
x-ms-version: 2009-09-19
Content-Length: 13702
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
Flow | Issuer | Subject | Fingerprint |
---|---|---|---|
TLSv1 192.168.56.103:49170 104.16.18.94:443 |
C=US, O=Cloudflare, Inc., CN=Cloudflare Inc RSA CA-2 | C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com | 69:29:16:86:9f:a7:3e:5e:b3:fd:fa:2d:3f:0d:64:61:d5:90:d5:e3 |
TLSv1 192.168.56.103:49171 104.16.18.94:443 |
C=US, O=Cloudflare, Inc., CN=Cloudflare Inc RSA CA-2 | C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com | 69:29:16:86:9f:a7:3e:5e:b3:fd:fa:2d:3f:0d:64:61:d5:90:d5:e3 |
Snort Alerts
No Snort Alerts