NetWork | ZeroBOX

Flow	SID	Signature	Category
TCP 192.168.56.102:49174 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49174 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49167 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49165 -> 46.161.40.172:80	2034022	ET MALWARE MirrorBlast CnC Activity M2	Malware Command and Control Activity Detected
TCP 192.168.56.102:49167 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49166 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49166 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49176 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49176 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49177 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49177 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49172 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49172 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49179 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49175 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49179 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49175 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49180 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49180 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49185 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49185 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49181 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49181 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49193 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49193 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49184 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49184 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49189 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49192 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49197 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49189 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49192 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49197 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49187 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49187 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49165 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49213 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49191 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49213 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49191 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49188 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49196 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49188 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49196 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49168 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49168 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49200 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49200 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49195 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49195 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49220 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49199 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49220 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49199 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49201 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49201 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49182 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49182 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49205 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49207 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49205 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49207 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49203 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49203 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49183 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49183 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49208 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49208 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49206 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49206 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49211 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49211 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49209 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49186 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49209 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49219 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49186 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49219 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49216 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49216 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49190 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49190 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49217 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49222 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49217 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49222 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49221 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49221 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49194 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49194 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49223 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49223 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49198 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49198 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49202 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49202 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49215 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49215 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49169 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49169 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49218 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49218 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49170 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49170 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49171 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49171 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49173 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49173 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49178 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49178 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49204 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49204 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic
TCP 192.168.56.102:49212 -> 46.161.40.172:80	2034023	ET MALWARE MirrorBlast CnC Activity M3	Malware Command and Control Activity Detected
TCP 192.168.56.102:49212 -> 46.161.40.172:80	2034021	ET USER_AGENTS Suspicious User-Agent (REBOL)	Potentially Bad Traffic

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts