Network Analysis
IP Address | Status | Action | VT | Location |
---|---|---|---|---|
No hosts contacted. |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
Flow | SID | Message |
---|---|---|
TCP 192.168.168.201:49232 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.201:49234 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.201:49235 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 104.152.54.52:6667 -> 192.168.168.201:49236 | 2812135 | ETPRO POLICY Possible IRC Botnet Activity - Throttled Connection |