NetWork | ZeroBOX

IP Address	Status	Action
103.89.89.134	Active	Moloch
164.124.101.2	Active	Moloch

Name	Response	Post-Analysis Lookup
tzitziklishop.ddns.net	A 103.89.89.134	103.89.89.134

No traffic

No ICMP traffic performed.

No IRC requests performed.

Flow	SID	Signature	Category
UDP 192.168.56.101:61479 -> 8.8.8.8:53	2028675	ET POLICY DNS Query to DynDNS Domain *.ddns .net	Potentially Bad Traffic
TCP 192.168.56.101:49212 -> 103.89.89.134:1665	2025019	ET MALWARE Possible NanoCore C2 60B	Malware Command and Control Activity Detected

No Suricata TLS

No Snort Alerts