NetWork | ZeroBOX

Network Analysis

IP Address Status Action
163.123.143.98 Active Moloch
164.124.101.2 Active Moloch
Name Response Post-Analysis Lookup
xyoptotway.work.gd 163.123.143.98

No traffic

ICMP traffic

Source Destination ICMP Type Data
192.168.56.101 164.124.101.2 3

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
UDP 192.168.56.101:59002 -> 164.124.101.2:53 2042826 ET INFO DYNAMIC_DNS Query to a *.work .gd Domain Potentially Bad Traffic
UDP 192.168.56.101:59002 -> 8.8.8.8:53 2042826 ET INFO DYNAMIC_DNS Query to a *.work .gd Domain Potentially Bad Traffic

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts