Network Analysis
| IP Address | Status | Action | VT | Location |
|---|---|---|---|---|
| No hosts contacted. | ||||
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
No traffic
No traffic
No traffic
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| UDP 192.168.168.102:59436 -> 8.8.8.8:53 | 2014169 | ET DNS Query for .su TLD (Soviet Union) Often Malware Related | Potentially Bad Traffic |
| UDP 192.168.168.102:35641 -> 74.125.250.129:19302 | 2033078 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) | Misc activity |
Suricata TLS
No Suricata TLS
Snort Alerts
| Flow | SID | Message |
|---|---|---|
| UDP 192.168.168.102:59436 -> 8.8.8.8:53 | 2014169 | ET DNS Query for .su TLD (Soviet Union) Often Malware Related |
| UDP 192.168.168.102:35641 -> 74.125.250.129:19302 | 2033078 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) |
