Network Analysis
| IP Address | Status | Action |
|---|---|---|
| 176.65.144.23 | Active | Moloch |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
- TCP Requests
GET
200
http://176.65.144.23/ff/brainnnn.txt
REQUEST
RESPONSE
BODY
GET /ff/brainnnn.txt HTTP/1.1
Host: 176.65.144.23
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 30 Apr 2025 04:32:29 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Mon, 28 Apr 2025 19:50:39 GMT
ETag: "3cab8-633dbff99c0b8"
Accept-Ranges: bytes
Content-Length: 248504
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/plain
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 176.65.144.23:80 -> 192.168.56.101:49162 | 2400029 | ET DROP Spamhaus DROP Listed Traffic Inbound group 30 | Misc Attack |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts