NetWork | ZeroBOX

Network Analysis

IP Address Status Action
164.124.101.2 Active Moloch
185.215.113.66 Active Moloch
Name Response Post-Analysis Lookup
twizt.net 185.215.113.66
GET 200 http://twizt.net/vncinstall.php
REQUEST
RESPONSE
GET 404 http://twizt.net/lbslut.exe
REQUEST
RESPONSE

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
TCP 185.215.113.66:80 -> 192.168.56.103:49161 2400032 ET DROP Spamhaus DROP Listed Traffic Inbound group 33 Misc Attack

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts