NetWork | ZeroBOX

Network Analysis

IP Address Status Action
147.185.221.22 Active Moloch
164.124.101.2 Active Moloch
208.95.112.1 Active Moloch
45.120.178.138 Active Moloch
Name Response Post-Analysis Lookup
central-randy.gl.at.ply.gg 147.185.221.22

No traffic

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

Flow SID Signature Category
UDP 192.168.56.103:52760 -> 164.124.101.2:53 2044590 ET INFO playit .gg Tunneling Domain in DNS Lookup Potentially Bad Traffic
UDP 192.168.56.103:52760 -> 164.124.101.2:53 2054989 ET INFO Tunneling Service in DNS Lookup (* .ply .gg) Misc activity

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts