NetWork | ZeroBOX

IP Address	Status	Action
164.124.101.2	Active	Moloch
172.96.140.157	Active	Moloch

Name	Response	Post-Analysis Lookup
6jxbmkpe.torontobotdns.com	A 104.238.222.21 A 104.194.8.167 A 104.194.8.112 A 172.96.141.132 CNAME 8tqxpf27.torontobotdns.com A 172.96.140.32 A 172.96.140.157	104.194.8.112

No traffic

No ICMP traffic performed.

No IRC requests performed.

Flow	SID	Signature	Category
TCP 192.168.56.103:49180 -> 172.96.140.157:44441	2024897	ET USER_AGENTS Go HTTP Client User-Agent	Misc activity

No Suricata TLS

No Snort Alerts