Network Analysis
IP Address | Status | Action | VT | Location |
---|---|---|---|---|
No hosts contacted. |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
Flow | SID | Message |
---|---|---|
TCP 192.168.168.213:49241 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.213:49244 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 192.168.168.213:49245 -> 104.152.54.52:6667 | 2002028 | ET CHAT IRC PONG response |
TCP 104.152.54.52:6667 -> 192.168.168.213:49246 | 2812135 | ETPRO POLICY Possible IRC Botnet Activity - Throttled Connection |