NetWork | ZeroBOX

Network Analysis

IP Address Status Action
164.124.101.2 Active Moloch
185.32.190.113 Active Moloch
Name Response Post-Analysis Lookup
eisnt.com 185.32.190.113
GET 404 http://eisnt.com/ahu-punjab/Fgxogd.bmp
REQUEST
RESPONSE

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 192.168.56.101:49163 -> 185.32.190.113:80 2030384 ET HUNTING Suspicious Terse Request for .bmp Potentially Bad Traffic

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts