Skip to content

Naughty IP

Naughty IP                                          Web Ring                                          A picture containing clipart

Description automatically generatedAlabaster Snowball

A picture containing text

Description automatically generated

Text

Description automatically generated

Hint from Alabaster Snowball
The victim web server is 10.12.42.16. Which host is the next top talker?

https://storage.googleapis.com/hhc22_player_assets/boriaArtifacts.zip

The briaArtifacts.zip has two files : victim.pcap and weberror.txt

The briaArtifacts.zip has two files : victim.pcap and weberror.txt

In the zip file, open victim.pcap in Wireshark

Got to Statistics > Conversations

Sort the "bytes" column in descending order

In the zip file, open victim.pcap in Wireshark
Got to Statistics > Conversations 
Sort the "bytes" column in descending order

Answer : 18.222.86.32

Upon submitting the answer, the objective is now completed, and we get 5 coins