Network Analysis
| IP Address | Status | Action | VT | Location |
|---|---|---|---|---|
| No hosts contacted. | ||||
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLS 1.2 192.168.168.204:49225 172.66.47.81:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=caucwifi-bhb.pages.dev | 74:a4:05:44:5c:e2:00:01:25:5a:36:67:47:7d:ca:21:c5:d3:0c:ec |
|
TLS 1.2 192.168.168.204:49238 62.115.253.122:443 |
C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA | C=US, ST=New York, O=Ziff Davis LLC, CN=www.ziffdavis.com | ea:fe:51:95:bf:16:3b:3f:25:db:aa:56:9f:9e:fb:80:a8:fd:40:6c |
|
TLS 1.2 192.168.168.204:49239 62.115.253.122:443 |
C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA | C=US, ST=New York, O=Ziff Davis LLC, CN=www.ziffdavis.com | ea:fe:51:95:bf:16:3b:3f:25:db:aa:56:9f:9e:fb:80:a8:fd:40:6c |
|
TLS 1.2 192.168.168.204:49233 172.66.47.81:443 |
None | None | None |
|
TLS 1.2 192.168.168.204:49235 172.66.47.81:443 |
None | None | None |
|
TLS 1.2 192.168.168.204:49236 172.66.47.81:443 |
None | None | None |
|
TLS 1.2 192.168.168.204:49234 172.66.47.81:443 |
None | None | None |
|
TLS 1.2 192.168.168.204:49237 172.66.47.81:443 |
None | None | None |
|
TLS 1.2 192.168.168.204:49242 104.18.128.216:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=diffuser-cdn.app-us1.com | d5:a5:ae:51:2e:75:aa:74:13:4c:c5:34:10:28:2d:9b:a1:2f:e9:a3 |
|
TLS 1.2 192.168.168.204:49241 104.18.128.216:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=diffuser-cdn.app-us1.com | d5:a5:ae:51:2e:75:aa:74:13:4c:c5:34:10:28:2d:9b:a1:2f:e9:a3 |
|
TLS 1.2 192.168.168.204:49244 104.17.31.174:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=prism.app-us1.com | 1b:d3:7b:48:51:cd:58:9a:9b:ed:c6:5c:84:34:48:da:4c:db:7e:93 |
|
TLS 1.2 192.168.168.204:49245 104.17.31.174:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=prism.app-us1.com | 1b:d3:7b:48:51:cd:58:9a:9b:ed:c6:5c:84:34:48:da:4c:db:7e:93 |
Snort Alerts
| Flow | SID | Message |
|---|---|---|
| UDP 192.168.168.204:58187 -> 8.8.8.8:53 | 2057745 | ET INFO DNS Query to Cloudflare Page Developer Domain (pages .dev) |
| TCP 192.168.168.204:49225 -> 172.66.47.81:443 | 2057746 | ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI) |
