NetWork | ZeroBOX

Network Analysis

IP Address Status Action
185.239.239.194 Active Moloch
164.124.101.2 Active Moloch
65.21.213.208 Active Moloch
Name Response Post-Analysis Lookup
No hosts contacted.

No traffic

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 65.21.213.208:3000 -> 192.168.56.103:49161 2029538 ET HUNTING EXE Base64 Encoded potential malware Misc activity

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts