Time |
Victim OS |
Infection Source |
C&C Server |
DNS Lookups & Failed Connects |
Infection Port |
Packet Trace |
Detection Signatures |
Infection Chatter |
BotHunter Analysis |
Behavioral Cluster |
Forensic Logs |
Antivirus Labels |
Packed Malware_Binary |
Unpacked egg.exe |
Unpacked egg.asm |
Packer PEID |
Data Strings |
Syscall Trace |
01:04:00 | Win2K-f | 113.10.97.120 (-): . |
n/a | US:www.msn.com US:dqcywyapi.org :djcvcvcoa.net :uzefwdtgigd.net US:ciwwuu.org :xnbpafozlqc.biz US:fxqww.info US:xosrhdsaeas.info :qbvhouiz.info :esigaqnux.com :vxgybsofbc.biz :herxvxaat.biz :jglhdvxn.net :hmglewbbsia.info :mbtxprqip.biz :ugfrpl.net :gwlvvoyedqe.biz US:nvjsishg.org :ktlxsgnle.com NL:fkyjwbllras.org :rucxdabsr.com US:smgyauxf.info US:edtip.org :ofjkosgv.com :iuojaccazoy.com :okdmufirrd.biz :epkfv.net US:yvvmbmnmhfa.info :lrpmjimcgw.com :ceaktng.net :vsyhapmuq.com NL:mispxc.org US:epqxamji.org US:wensjxohmw.org US:qesjdrv.info :crkuw.net :hzsnpgjr.biz :plxzovfb.com US:fqipqorq.org :jjowhzmxhfs.biz NL:dlqrjcnx.org :vexwgly.net :olobn.biz :tkilv.biz :xcfwqzcqn.net US:vwpgpmywm.org US:eyzgylvmz.org :ycoqr.biz :gybsuubfw.info :mkbkcjlzyh.com :whotd.net US:ortcmmybnla.info :qedmgdnf.biz :adqgnhfhddr.org :ueflnuke.biz :lyaypdvh.biz US:zzkgwwj.org :ijbbwlnd.net :odaieaarmbf.net :crrnzadscf.net :izcfadzh.net US:204.152.184.92:80 US:74.208.64.145:80 |
445 | pcap | raw alerts ruleset |
http 17 lines |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:01:35:00 | Win2K-f | 69.193.74.22 (-): . |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 32 |
53bfe15e91 NEW 73f1082158 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:02:27:00 | WinXP | 70.182.95.25 (COX.NET): COX COMMUNICATIONS, OKLAHOMA CITY, OKLAHOMA, US. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 110 lines |
Yeah : 1.3 profile |
none | summary tarball |
39 of 41 38 of 41 |
0cfec3f183 NEW af6521a46c NEW |
f3d2639900 [0] 37dd0e1040[0] |
none:none none:none |
tElock| Armadillo| |
none none |
trace trace |
03:00:00 | Win2K-f | 95.28.42.132 (-): . |
n/a | :checkip.dyndns.org | 445 | pcap | raw alerts ruleset |
http 1 line |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:03:00:00 | WinXP | 151.81.128.122 (38-151.NET24.IT): IUNET-BNET, IT. |
n/a | RU:citi-bank.ru RU:213.219.245.212:80 |
445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 0.8 profile |
none | summary tarball |
41 of 41 | c44169f401 NEW |
64d22c5c02 [0] | none:none |
PolyEnE| | none | trace |
T:03:22:00 | WinXP | 87.173.94.10 (T-IPCONNECT.DE): DEUTSCHE TELEKOM AG, DE. |
n/a | 445 | pcap | raw alerts ruleset |
shell ftp 14 lines |
Yeah : 1.3 profile |
none | summary tarball |
31 of 32 | 741e3b03b3 NEW |
none[0] | none:none |
none|none | lines=61 | trace | |
03:23:00 | WinXP | 41.202.176.33 (-): . |
213.219.245.212:80 | RU:citi-bank.ru | 445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 1.3 profile |
none | summary tarball |
39 of 41 | 7f38ca84af NEW |
89991cf07f [0] | none:none |
PolyEnE| | none | trace |
T:03:54:00 | Win2K-f | 75.60.195.10 (SBCGLOBAL.NET): PPPOX POOL - SE1.WOTNOH, COLUMBUS, OHIO, US. (DSL) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:05:15:00 | WinXP | 118.231.15.104 (-): . |
n/a | RU:citi-bank.ru RU:213.219.245.212:80 |
445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 0.8 profile |
none | summary tarball |
38 of 41 | a639a866cf NEW |
c7bf122964 [0] | none:none |
PolyEnE| | none | trace |
T:06:11:00 | Win2K-f | 118.87.18.132 (-): . |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 129 lines |
Yeah : 1.3 profile |
none | summary tarball |
32 of 36 34 of 36 |
0b951c2832 NEW e4ed4df0f0 NEW |
5fe761661a [0] de471fc380[0] |
none:none none:none |
Armadillo| tElock| |
none none |
trace trace |
T:06:35:00 | WinXP | 206.53.74.173 (METROCAST.NET): METROCAST COMMUNICATIONS, DANIELSON, CONNECTICUT, US. |
n/a | RU:citi-bank.ru RU:213.219.245.212:80 |
445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 0.8 profile |
none | summary tarball |
41 of 41 | 72134e4b44 NEW |
28c60e99a7 [0] | none:none |
PolyEnE| | none | trace |
06:50:00 | Win2K-f | 89.41.253.63 (AIRBITES.RO): SC AIR BITES SRL, RO. |
n/a | :zniddq.com :pjedxkav.net NL:nqaaz.org :gphnpjrusn.com :sxbqmgpy.biz US:fqipqorq.org US:jybubclmjq.org US:xjankhma.org :omealfjjw.net US:flidassrtu.org :cyymykmihg.net :lbcxtixi.info :lcmmgaeuyu.net NL:oldpbd.info US:jeezpeyh.org US:xppqf.info :nvjsishg.org :izcfadzh.net :xcfwqzcqn.net :tqbal.biz :yjjzmk.net :epskpklwj.biz NL:uladiowzz.org :afiawshsiey.com US:fkyjwbllras.org US:krfbuh.info US:yrgan.org :skobgujdemx.com US:fmqebnr.info :zutzuxpl.net US:ortcmmybnla.info US:alzdmapr.org :fqmluiqcdw.biz :plxzovfb.com NL:iarmst.org :jmzaonnvadx.com :wmjgtaau.net US:nlmnpujb.org US:btcmiknq.org :elziu.com :mkbkcjlzyh.com :kkwidfc.biz :xnbpafozlqc.biz US:fshyrylncvz.org US:zpxhdidlfpw.org :hfkcgpfelw.com :mbtxprqip.biz :ocxtvxzzcx.net NL:ktpvdapmlq.info :aowajhpc.net US:204.152.184.92:80 US:74.208.64.145:80 |
445 | pcap | raw alerts ruleset |
http 1 line |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:07:02:00 | Win2K-f | 211.124.142.36 (ZAQ.NE.JP): KITAKAWACHI CABLE NET CO LTD, OSAKA, OSAKA, JP. |
n/a | 135 | pcap | raw alerts ruleset |
other 232 lines |
Yeah : 1.3 profile |
none | summary tarball |
18 of 32 | bec892aaf3 NEW |
b73f3acec5 [0] | none:none |
none|none | none | trace | |
T:08:25:00 | WinXP | 12.64.48.35 (PRSERV.NET): AT&T GLOBAL SERVICES, CHICAGO, ILLINOIS, US. |
n/a | :www.google.com.au US:www.yahoo.com :jbeegvia.ru |
445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 0.8 profile |
none | summary tarball |
31 of 32 | 17028f1eda NEW |
none[3] | none:none |
tElock| | none | trace |
T:08:48:00 | WinXP | 79.163.211.15 (-): IDEA, PL. |
213.219.245.212:80 | RU:citi-bank.ru | 445 | pcap | raw alerts ruleset |
http 3 lines |
Yeah : 1.3 profile |
none | summary tarball |
40 of 41 | e63f3be55b NEW |
0a081f4200 [0] | none:none |
PolyEnE| | none | trace |
T:08:48:00 | Win2K-f | 71.127.246.30 (VERIZON.NET): VERIZON INTERNET SERVICES INC, ITHACA, NEW YORK, US. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
09:53:00 | Win2K-f | 84.56.186.138 (ARCOR-IP.NET): ARCOR-DSL-NET, STUTTGART, BADEN-WURTTEMBERG, DE. (DSL) |
n/a | US:trafficconverter.biz US:www.yahoo.com :stisvzsy.net :aybzavdvnx.net :plxzovfb.com US:fjraotyivpe.org :olobn.biz :gkwxdp.com US:jtkymrnl.org :yhucbakgvi.biz :zniddq.com US:zpxhdidlfpw.org :ypdxxgqk.net US:zljixnkk.info :pjedxkav.net US:fxywdwsl.org :jcgzqpbcb.net :yjjzmk.net US:bmninbnl.info :irgyq.com :mkbkcjlzyh.com US:iklqenmx.info :crkuw.net US:wmqsswle.info :mlzwbvwicb.biz :uiydmknuu.net :bcbqslalg.com US:dzbvht.info US:jtlmbqcmjn.info US:nqaaz.org US:azlytlsj.org US:qbjjahdsq.info US:204.152.184.92:80 US:74.208.64.145:80 |
445 | pcap | raw alerts ruleset |
http 1 line |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:10:46:00 | WinXP | 93.102.71.118 (APEXCOVANTAGE.COM): EU-ZZ, UK. |
n/a | US:www.altavista.com US:www.yahoo.com :jbeegvia.ru |
445 | pcap | raw alerts ruleset |
http 1 line |
Yeah : 0.8 profile |
none | summary tarball |
31 of 32 | 17028f1eda NEW |
none[3] | none:none |
tElock| | none | trace |
11:01:00 | Win2K-f | 124.66.160.131 (-): PT ANTAR MITRA PRAKARSA, JAKARTA, JAKARTA RAYA (DJAKARTA RAYA), ID. |
n/a | US:www.maxmind.com US:www.getmyip.org US:getmyip.co.uk US:checkip.dyndns.org 208.78.69.70:80 US:65.254.39.170:80 US:67.15.94.80:80 US:75.126.138.202:80 |
445 | pcap | raw alerts ruleset |
http 1 line |
Yeah : 0.8 profile |
none | summary tarball |
3 of 37 | d9cb288f31 NEW |
45603a001c [0] | ASM:Graph |
UPX| | lines=174 embedded dns |
trace |
12:02:00 | WinXP | 62.63.208.127 (TYFON.SE): TYFON SVENSKA AB, SE. |
n/a | :moscow-advokat.ru | 445 | pcap | raw alerts ruleset |
other 0 lines |
Yeah : 0.8 profile |
none | summary tarball |
29 of 29 | d175bad0e6 NEW |
none[0] | ASM:Graph |
tElock| | lines=81 embedded dns |
trace |
T:13:12:00 | Win2K-f | 61.218.192.234 (HINET.NET): CHTD CHUNGHWA TELECOM CO. LTD, KAOHSIUNG, KAO-HSIUNG, TW. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW 57ce4acac2 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:13:13:00 | Win2K-f | 96.49.5.211 (-): . |
n/a | 135 | pcap | raw alerts ruleset |
other 1008 lines |
Yeah : 1.3 profile |
none | summary tarball |
15 of 41 | 770a04a72c NEW |
none[3] | none:none |
none|none | none | trace | |
T:14:55:00 | WinXP | 187.20.83.118 (-): . |
n/a | :moscow-advokat.ru | 445 | pcap | raw alerts ruleset |
http 1 line |
Yeah : 0.8 profile |
none | summary tarball |
40 of 41 | 2f6cc0e618 NEW |
f8f316af28 [0] | none:none |
PolyEnE| | none | trace |
T:14:56:00 | Win2K-f | 4.176.159.134 (LEVEL3.NET): LEVEL 3 COMMUNICATIONS INC, ALBUQUERQUE, NEW MEXICO, US. (DIAL) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:15:30:00 | Win2K-f | 4.141.26.203 (LEVEL3.NET): LEVEL 3 COMMUNICATIONS INC, CAZENOVIA, NEW YORK, US. (DIAL) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 129 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 8 of 33 |
53bfe15e91 NEW b7082104e4 NEW |
1473091351 [0] c5b49e7b82[0] |
ASM:Graph ASM:Graph |
tElock| tElock| |
lines=75 embedded dns lines=41 |
trace trace |
T:16:04:00 | WinXP | 200.219.108.98 (STERLINGSTUDENTS.NET): COMITE GESTOR DA INTERNET NO BRASIL, BR. (DSL) |
n/a | RU:citi-bank.ru RU:213.219.245.212:80 |
445 | pcap | raw alerts ruleset |
http 1 line |
Yeah : 0.8 profile |
none | summary tarball |
40 of 41 | 694802b8ef NEW |
433eb20eb6 [0] | none:none |
PolyEnE| | none | trace |
T:16:14:00 | Win2K-f | 172.130.47.17 (AOL.COM): AMERICA ONLINE, RESTON, VIRGINIA, US. (DSL) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 77 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 32 |
53bfe15e91 NEW 73f1082158 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:17:08:00 | WinXP | 81.92.50.235 (MYQ.GR): Q TELECOMMUNICATIONS S.A, ATHENS, ATTIKI, GR. |
n/a | 445 | pcap | raw alerts ruleset |
shell ftp 14 lines |
Yeah : 1.3 profile |
none | summary tarball |
29 of 29 | 1a2c0e6130 NEW |
none[0] | none:none |
none|none | lines=60 | trace | |
T:17:11:00 | Win2K-f | 4.176.39.93 (LEVEL3.NET): LEVEL 3 COMMUNICATIONS INC, MESA, ARIZONA, US. (DIAL) |
n/a | 135 | pcap | raw alerts ruleset |
other 149 lines |
Yeah : 1.3 profile |
none | summary tarball |
37 of 41 | a1acc403a2 NEW |
54ef26c2f9 [0] | none:none |
Armadillo| | none | trace | |
T:17:12:00 | Win2K-f | 4.138.80.155 (LEVEL3.NET): LEVEL 3 COMMUNICATIONS INC, SUWANEE, GEORGIA, US. (DIAL) |
n/a | 135 | pcap | raw alerts ruleset |
other 6 lines |
Yeah : 0.8 profile |
none | summary tarball |
none | none | none | none | none | none | none | |
T:17:17:00 | WinXP | 89.111.226.220 (TEOL.NET): TELEKOMSRPSKE, BA. (DIAL) |
n/a | 445 | pcap | raw alerts ruleset |
shell ftp 15 lines |
Yeah : 1.3 profile |
none | summary tarball |
37 of 40 | f54691063f NEW |
6039c698cd [0] | ASM:Graph |
none|none | lines=59 | trace | |
T:18:03:00 | WinXP | 98.141.9.117 (-): . |
n/a | 135 | pcap | raw alerts ruleset |
other 19 lines |
Yeah : 1.3 profile |
none | summary tarball |
none | none | none | none | none | none | none | |
T:19:05:00 | WinXP | 67.52.25.21 (RR.COM): ROAD RUNNER HOLDCO LLC, RACINE, WISCONSIN, US. |
n/a | RU:citi-bank.ru RU:213.219.245.212:80 |
445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 0.8 profile |
none | summary tarball |
40 of 41 | 119ec42aa0 NEW |
fd3c61c261 [0] | none:none |
PolyEnE| | none | trace |
T:19:43:00 | Win2K-f | 71.116.212.170 (VERIZON.NET): VERIZON INTERNET SERVICES INC, LOS ANGELES, CALIFORNIA, US. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
20:06:00 | Win2K-f | 187.44.5.171 (-): . |
n/a | :www.google.com :wfqkawvgg.com :gdippldouai.biz :cnxyymhv.biz US:qmylymvm.org :hsczbabol.com US:kcbspqb.org :qtmlsd.biz :yvdttitegd.com :kgmonrsp.com US:gbjfjtidrsp.info :ndasvrgaamp.biz :aodah.com US:txvhdr.info :zsvclwen.net US:alfoyk.org :tlzbjytye.net US:mxyumj.info :wiyufh.biz :vxqsjmue.net US:hyqxnpc.info :bjytrofi.net :zwysgnodz.net US:vsbugypnw.org US:ozzythtv.info US:tlktkhyd.org :ehgmwjimjq.com US:usiigfkzfza.info :geyiau.com :rzdyzrw.org NL:fbrgnhsi.org US:ursgqise.info :kkmqxetp.net US:mwlyumn.org :awblpgnyfi.com :yinbcp.net :xdyampjvmm.com :aeioncyi.com US:tiwvoovf.info :jkxkotkzcbk.net :lcvsn.net US:204.152.184.92:80 US:74.208.64.145:80 |
445 | pcap | raw alerts ruleset |
http 8 lines |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:20:31:00 | WinXP | 125.4.220.152 (ZAQ.NE.JP): KITAKAWACHI CABLE NET CO LTD, JP. |
n/a | 135 | pcap | raw alerts ruleset |
other 249 lines |
Yeah : 1.3 profile |
none | summary tarball |
39 of 41 | a8a15ce6ae NEW |
0d23174d7b [0] | none:none |
PolyEnE| | none | trace | |
20:44:00 | Win2K-f | 220.129.124.128 (HINET.NET): CHTD CHUNGHWA TELECOM CO. LTD, KAOHSIUNG, KAO-HSIUNG, TW. |
n/a | EU:checkip.dyndns.org US:getmyip.co.uk US:www.getmyip.org US:204.152.184.92:80 US:65.254.39.170:80 EU:91.198.22.70:80 |
445 | pcap | raw alerts ruleset |
http 1 line |
Argh : 0.3 profile |
none | summary tarball |
none | none | none | none | none | none | none |
T:20:48:00 | Win2K-f | 203.91.165.198 (STARCAT.NE.JP): KMN CORPORATION, NAGOYA, AICHI, JP. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 59 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 8 of 33 |
53bfe15e91 NEW b7082104e4 NEW |
1473091351 [0] c5b49e7b82[0] |
ASM:Graph ASM:Graph |
tElock| tElock| |
lines=75 embedded dns lines=41 |
trace trace |
T:20:50:00 | WinXP | 24.213.224.238 (RR.COM): ROAD RUNNER HOLDCO LLC, AMSTERDAM, NEW YORK, US. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:20:51:00 | WinXP | 203.196.73.71 (KAGACABLE.NE.JP): KAGA CABLE TELEVISION CO.LTD, JP. (DSL) |
n/a | 135 | pcap | raw alerts ruleset |
other 432 lines |
Yeah : 1.3 profile |
none | summary tarball |
40 of 41 | 5b391c97c3 NEW |
794c5d4b69 [0] | none:none |
PENinja S| | none | trace | |
T:21:11:00 | WinXP | 98.30.117.92 (-): . |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 76 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW a08f3b74a4 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:21:20:00 | Win2K-f | 61.221.250.18 (HINET.NET): DATA COMMUNICATION BUSINESS GROUP CHUNGHWA TELECOM CO. LTD, TW. |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 79 lines |
Yeah : 1.3 profile |
none | summary tarball |
33 of 33 0 of 33 |
53bfe15e91 NEW 57ce4acac2 NEW |
1473091351 [0] none [0] |
ASM:Graph none:none |
tElock| Armadillo| |
lines=75 embedded dns lines=90 |
trace trace |
T:23:12:00 | WinXP | 203.73.57.180 (SEED.NET.TW): DIGITAL UNITED INC, TAIPEI, T'AI-PEI, TW. (DSL) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 110 lines |
Yeah : 1.3 profile |
none | summary tarball |
39 of 41 41 of 41 |
5ffa88bdca NEW 7d1c24e1b1 NEW |
b088542abb [0] eb039ab0c2[0] |
none:none none:none |
Armadillo| tElock| |
none none |
trace trace |
T:23:25:00 | WinXP | 220.209.199.136 (INFOWEB.NE.JP): INFOWEB(FUJITSU LTD.), TOKYO, TOKYO, JP. (DIAL) |
213.219.245.212:80 | RU:citi-bank.ru | 445 | pcap | raw alerts ruleset |
http 2 lines |
Yeah : 1.3 profile |
none | summary tarball |
29 of 29 | bdb53fb863 NEW |
d9d20eabcf [0] | none:none |
PolyEnE| | none | trace |
T:23:54:00 | Win2K-f | 99.164.48.10 (-): . |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
18 of 35 0 of 33 |
218ce30f5c NEW a08f3b74a4 NEW |
none[3] none [0] |
none:none none:none |
none|none Armadillo| |
none lines=90 |
trace trace |
T:23:59:00 | WinXP | 72.66.8.36 (VERIZON.NET): GAIP INC, VIENNA, VIRGINIA, US. (100Mbps) |
n/a | US:microsoft.com | 135 | pcap | raw alerts ruleset |
other 75 lines |
Yeah : 1.3 profile |
none | summary tarball |
18 of 35 0 of 32 |
218ce30f5c NEW 73f1082158 NEW |
none[3] none [0] |
none:none none:none |
none|none Armadillo| |
none lines=90 |
trace trace |