NetWork | ZeroBOX

Network Analysis

IP Address Status Action
82.118.23.50 Active Moloch
Name Response Post-Analysis Lookup
No hosts contacted.
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE
POST 200 http://82.118.23.50/c2sock
REQUEST
RESPONSE

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode
TCP 82.118.23.50:80 -> 192.168.56.103:49167 2221010 SURICATA HTTP unable to match response to request Generic Protocol Command Decode

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts