Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| www.notebooksell.kr | 183.111.169.84 |
POST
200
http://www.notebooksell.kr/mall/m_schema.php
REQUEST
RESPONSE
BODY
POST /mall/m_schema.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/88.0
Host: www.notebooksell.kr
Content-Length: 65
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 19 Jul 2023 00:35:32 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.6.8
Content-Length: 0
Connection: close
Content-Type: text/html; charset=EUC-KR
POST
200
http://www.notebooksell.kr/mall/m_schema.php
REQUEST
RESPONSE
BODY
POST /mall/m_schema.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/88.0
Host: www.notebooksell.kr
Content-Length: 33
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 19 Jul 2023 00:35:32 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.6.8
Content-Length: 4
Connection: close
Content-Type: text/html; charset=EUC-KR
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 192.168.56.101:49164 -> 183.111.169.84:80 | 2016693 | ET INFO SUSPICIOUS UA starting with Mozilla/8 | Potentially Bad Traffic |
| TCP 192.168.56.101:49163 -> 183.111.169.84:80 | 2016693 | ET INFO SUSPICIOUS UA starting with Mozilla/8 | Potentially Bad Traffic |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts