NetWork | ZeroBOX

Network Analysis

IP Address Status Action
185.157.162.126 Active Moloch
45.12.253.107 Active Moloch
Name Response Post-Analysis Lookup
No hosts contacted.

No traffic

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 45.12.253.107:222 -> 192.168.56.101:49164 2035769 ET HUNTING [TW] Likely Hex Executable String Misc activity
TCP 45.12.253.107:222 -> 192.168.56.101:49164 2020482 ET WEB_CLIENT DRIVEBY GENERIC ShellExecute in Hex No Seps A Network Trojan was detected

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts