NetWork | ZeroBOX

Network Analysis

IP Address Status Action
103.89.90.65 Active Moloch
Name Response Post-Analysis Lookup
godisgood1.hopto.org 103.89.90.65

No traffic

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
UDP 192.168.56.102:52336 -> 8.8.8.8:53 2028681 ET POLICY DNS Query to DynDNS Domain *.hopto .org Potentially Bad Traffic
TCP 192.168.56.102:49170 -> 103.89.90.65:7712 2025019 ET MALWARE Possible NanoCore C2 60B Malware Command and Control Activity Detected

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts