Network Analysis
| IP Address | Status | Action | VT | Location |
|---|---|---|---|---|
| No hosts contacted. | ||||
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 154.55.124.109:443 -> 192.168.168.206:49242 | 2031231 | ET INFO Observed ZeroSSL SSL/TLS Certificate | Misc activity |
| TCP 154.55.124.109:443 -> 192.168.168.206:49243 | 2031231 | ET INFO Observed ZeroSSL SSL/TLS Certificate | Misc activity |
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLS 1.2 192.168.168.206:49235 14.215.182.140:443 |
C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 | C=CN, ST=beijing, L=beijing, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com | 21:bf:66:0d:67:be:7a:7f:49:48:05:30:f4:7f:09:f2:30:36:ca:63 |
|
TLS 1.2 192.168.168.206:49234 14.215.182.140:443 |
C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 | C=CN, ST=beijing, L=beijing, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com | 21:bf:66:0d:67:be:7a:7f:49:48:05:30:f4:7f:09:f2:30:36:ca:63 |
|
TLS 1.2 192.168.168.206:49242 154.55.124.109:443 |
C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA | CN=00m6brr1.com | 89:80:39:de:ad:df:63:40:66:b0:e7:15:0c:06:96:24:ad:30:43:9c |
|
TLS 1.2 192.168.168.206:49243 154.55.124.109:443 |
C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA | CN=00m6brr1.com | 89:80:39:de:ad:df:63:40:66:b0:e7:15:0c:06:96:24:ad:30:43:9c |
Snort Alerts
No Snort Alerts
