popup
NetWork | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Network Analysis

Download pcap
Hosts 6 DNS 5 TCP 6 UDP 9 HTTP(S) 1 ICMP 0 IRC 0 Suricata Snort
IP Address Status Action
151.101.40.209 Active Moloch
164.124.101.2 Active Moloch
185.199.110.133 Active Moloch
185.232.14.169 Active Moloch
185.222.58.83 Active Moloch
20.200.245.247 Active Moloch
GET 200 http://wshsoft.company/jv/jrex.zip
REQUEST
RESPONSE
BODY 

            

        


    



        
	




                            
ICMP traffic



No ICMP traffic performed.



                            
IRC traffic



No IRC requests performed.



                            
Suricata Alerts


    
No Suricata Alerts




Suricata TLS


    

        

            Flow
            Issuer
            Subject
            Fingerprint
        

        
        

            
                TLS 1.2 

                192.168.56.101:49171 

                185.199.110.133:443
            		
            C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1
            C=US, ST=California, L=San Francisco, O=GitHub, Inc., CN=*.github.io
            a1:46:14:c7:2a:1d:52:79:f6:aa:2b:b2:c5:0a:3b:d3:f5:02:06:75
        

        
        

            
                TLS 1.2 

                192.168.56.101:49170 

                151.101.40.209:443
            		
            C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2023 Q1
            CN=repo1.maven.org
            94:bc:2a:d0:1a:cf:41:94:d4:9a:de:44:ab:b4:42:39:8a:f6:bf:f3
        

        
        

            
                TLS 1.2 

                192.168.56.101:49169 

                151.101.40.209:443
            		
            C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2023 Q1
            CN=repo1.maven.org
            94:bc:2a:d0:1a:cf:41:94:d4:9a:de:44:ab:b4:42:39:8a:f6:bf:f3
        

        
        

            
                TLS 1.2 

                192.168.56.101:49167 

                20.200.245.247:443
            		
            C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
            C=US, ST=California, L=San Francisco, O=GitHub, Inc., CN=github.com
            a3:b5:9e:5f:e8:84:ee:1f:34:d9:8e:ef:85:8e:3f:b6:62:ac:10:4a
        

        
        

            
                TLS 1.2 

                192.168.56.101:49168 

                151.101.40.209:443
            		
            C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2023 Q1
            CN=repo1.maven.org
            94:bc:2a:d0:1a:cf:41:94:d4:9a:de:44:ab:b4:42:39:8a:f6:bf:f3
        

        
    





                            
Snort Alerts


    
No Snort Alerts