Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| ddos.dnsnb8.net | 44.221.84.105 | |
| smtp.163.com | 103.129.252.45 |
- TCP Requests
-
-
103.129.252.45:25 192.168.56.101:49162
-
192.168.56.101:49163 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49165 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49166 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49167 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49169 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49171 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49173 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49174 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49177 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49178 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49179 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49180 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49181 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49183 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49185 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49188 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49191 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49193 44.221.84.105:799ddos.dnsnb8.net
-
192.168.56.101:49194 44.221.84.105:799ddos.dnsnb8.net
-
- UDP Requests
-
-
192.168.56.101:53004 164.124.101.2:53
-
192.168.56.101:54148 164.124.101.2:53
-
192.168.56.101:55146 164.124.101.2:53
-
192.168.56.101:59002 164.124.101.2:53
-
192.168.56.101:137 192.168.56.103:137
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:55149 239.255.255.250:1900
-
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 103.129.252.45:25 -> 192.168.56.101:49162 | 2260002 | SURICATA Applayer Detect protocol only one direction | Generic Protocol Command Decode |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts