NetWork | ZeroBOX

Network Analysis

IP Address Status Action
103.6.248.9 Active Moloch
164.124.101.2 Active Moloch
192.74.228.114 Active Moloch
23.95.60.83 Active Moloch
89.117.139.56 Active Moloch
GET 200 http://103.6.248.9/T018W/wininit.exe
REQUEST
RESPONSE
GET 200 http://23.95.60.83/rft/PiNqnEquXXipiHilYV223.bin
REQUEST
RESPONSE
GET 301 http://www.mezcalrosario.com/gs22/?x4ahHtwP=9vqGyEwSjFJ65F5HfUu0nj0baUEVEMWVa2VMtqXoJwbLaSy1AFIaNUZVE0qALa569XCftmAp&9r=gdidSh0H
REQUEST
RESPONSE
GET 0 http://www.w2w37.com/gs22/?x4ahHtwP=sxpFiT/QnuwqbREFEalc4xGkI+X15UMLgBOmnpWdTi7yXahnG8Uo0ChTsXgqiqTJ7vwSjSB2&9r=gdidSh0H
REQUEST
RESPONSE

ICMP traffic

Source Destination ICMP Type Data
192.168.56.101 164.124.101.2 3
192.168.56.101 164.124.101.2 3
192.168.56.101 164.124.101.2 3

IRC traffic

No IRC requests performed.

Snort Alerts

No Snort Alerts