Network Analysis
IP Address | Status | Action |
---|---|---|
185.196.220.62 | Active | Moloch |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
- TCP Requests
- UDP Requests
-
-
192.168.56.103:0 185.196.220.62:0
-
192.168.56.103:49156 185.196.220.62:24464
-
192.168.56.103:49157 185.196.220.62:24464
-
192.168.56.103:49158 185.196.220.62:24464
-
192.168.56.103:49159 185.196.220.62:24464
-
192.168.56.103:49160 185.196.220.62:24464
-
192.168.56.103:49161 185.196.220.62:24464
-
192.168.56.103:49162 185.196.220.62:24464
-
192.168.56.103:49163 185.196.220.62:24464
-
192.168.56.103:49164 185.196.220.62:24464
-
192.168.56.103:49165 185.196.220.62:24464
-
192.168.56.103:49166 185.196.220.62:24464
-
192.168.56.103:49167 185.196.220.62:24464
-
192.168.56.103:49168 185.196.220.62:24464
-
192.168.56.103:49169 185.196.220.62:24464
-
192.168.56.103:49170 185.196.220.62:24464
-
192.168.56.103:49171 185.196.220.62:24464
-
192.168.56.103:49172 185.196.220.62:24464
-
192.168.56.103:49173 185.196.220.62:24464
-
192.168.56.103:49174 185.196.220.62:24464
-
192.168.56.103:49175 185.196.220.62:24464
-
192.168.56.103:49176 185.196.220.62:24464
-
192.168.56.103:49177 185.196.220.62:24464
-
192.168.56.103:137 192.168.56.255:137
-
192.168.56.103:138 192.168.56.255:138
-
192.168.56.103:49154 239.255.255.250:1900
-
No traffic
ICMP traffic
Source | Destination | ICMP Type | Data |
---|---|---|---|
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 | |
192.168.56.103 | 185.196.220.62 | 3 |
IRC traffic
No IRC requests performed.
Suricata Alerts
Flow | SID | Signature | Category |
---|---|---|---|
TCP 192.168.56.103:49168 -> 185.196.220.62:24464 | 2046187 | ET MALWARE [ANY.RUN] Win32/DynamicRAT CnC Activity | Malware Command and Control Activity Detected |
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts