NetWork | ZeroBOX

Network Analysis

IP Address Status Action
142.250.71.195 Active Moloch
164.124.101.2 Active Moloch
Name Response Post-Analysis Lookup
No hosts contacted.
POST 200 https://update.googleapis.com/service/update2
REQUEST
RESPONSE

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 192.168.56.103:49246 -> 142.250.71.195:443 906200022 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined

Suricata TLS

Flow Issuer Subject Fingerprint
TLS 1.2
192.168.56.103:49246
142.250.71.195:443
C=US, O=Google Trust Services, CN=WR2 CN=upload.video.google.com c4:3f:12:39:d2:ec:4c:2c:1c:0a:a6:18:8e:2a:97:2c:d8:c2:7e:af

Snort Alerts

No Snort Alerts