Multiperspective Malware Analysis Page

Welcome to the Cyber-TA
SRI's Multiperspective Malware Infection Analysis Page

UNCENSORED PAGE

<Click here: to download BotHunter>

30 January 2013
<prev> <next>

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.

Daily Summary Files: [DNS Lookups & Failed Connects] [ Attacker IPs ] [C&C Servers] [Binary Digests]
Cumulative Summary Files: [DNS Lookup Log] [Attacker IP Log] [C&C Server Log] [Antivirus Detection] [Code Segment Overlap]
[Behavioral Clusters] [Binary Digest Log]

[See Country Codes ]

Time
Victim
OS
Infection
Source
C&C
Server
DNS Lookups &
Failed Connects Infection
Port
Packet
Trace
Detection
Signatures
Infection
Chatter
BotHunter
Analysis
Behavioral
Cluster
Forensic
Logs
Antivirus
Labels
Packed Malware_Binary Unpacked egg.exe
Unpacked egg.asm
Packer PEID
Data Strings
Syscall Trace

01:00:00 Win2K-f 111.73.142.53 (JWS.COM):
CHINANET JIANGXI PROVINCE NETWORK,
BEIJING, BEIJING, CN. (DSL) n/a US:www.ask.com
:frsvkmkx.net
:qkmoe.com
:pmjqeljeeux.net
:vsrrxuzjyo.org
:jcjjokdwa.com
:ncsfrlijt.com
:uzkqzka.com
:fbielbletm.net
:gkyvxnwzih.net
:omlxyvst.com
:djrovbs.org
US:pyvcd.biz
:afeki.info
:fgzezpsvz.info
US:jhtllvuvk.biz
:nbflknor.info
:qqzgwp.org
US:ntjrktsv.biz
:owpyo.com
US:qzsekzclxvz.biz
:etmvruqo.net
:uhdgf.org
US:drfsmcbyijn.biz
:gzrvgfu.com
:puwktbhoxx.org
US:tfjnz.biz
:owuilloj.com
US:fueojlswgyl.biz
:sspwxoogtx.info
:smahlhtrm.org
:bkjwhlitfkk.net
US:kwyuhu.biz
:ynvptan.net
:gsozfjcq.com
:juhounnfmic.org
:lvdysqhe.com
:zjewxcbm.org
:gxxhkuq.org
:jyluisti.net
:aothytumhk.org
:zsyzbdj.net
:bzwvoub.info
:uajzamth.net
US:rxlveq.biz
:sjcvzhwy.org
:aelfdgxibf.info
:tyrqpkzq.info
:cbtvcz.com
:kgboiponjrq.org
:kgxpilxfsvn.org
:dtuqjw.org
:yjfzwrwcio.com
:eabyao.net
:pgtmvxux.org
US:barwiwuqckx.biz
:jmchc.com
:bejfvocz.net
US:qfyfln.biz
:qgeft.net
:fysggsl.org
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
1 line Argh : 0.3
profile none summary
tarball none none none none none none none

03:51:00 Win2K-f 184.41.18.71 (-):
. n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
US:204.152.184.139:80
EE:62.65.192.25:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

04:10:00 Win2K-f 95.180.49.69 (IKOMLINE.NET):
IKOMLINE,
RS. (DSL) n/a :www.maxmind.com
US:checkip.dyndns.org
:getmyip.co.uk
:www.getmyip.org
DE:131.220.6.26:80
EU:91.198.22.70:80 445 pcap raw alerts
ruleset http
2 lines Argh : 0.3
profile none summary
tarball none none none none none none none

T:05:39:00 Win2K-f 59.108.48.142 (-):
BEIJING CAPITAL TELECOM TECHNOLOGY CO. LTD,
BEIJING, BEIJING, CN. (DSL) n/a EE:www.starman.ee
FI:194.215.38.135:80 139 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

T:07:14:00 WinXP 46.117.120.39 (-):
. 213.155.14.161:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset http
2 lines Yeah : 1.3
profile none summary
tarball 26 of 28 7d99b0e910
NEW none[0] none:none
PolyEnE| lines=68 trace

07:29:00 Win2K-f 185.9.157.223 (-):
. n/a :www.maxmind.com
US:checkip.dyndns.org
:www.getmyip.org
:getmyip.co.uk
174.36.207.186:80
EU:91.198.22.70:80 445 pcap raw alerts
ruleset http
1 line Yeah : 0.8
profile none summary
tarball 2 of 37 223d8089f8
NEW none[3] none:none
StarForce| none trace

08:10:00 Win2K-f 2.183.127.21 (-):
. n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:17:00 Win2K-f 176.74.160.101 (-):
. n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
26 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:23:00 Win2K-f 60.196.24.207 (-):
DACOM INTERNET SERVICE PROVIDER SEOUL KOREA,
SEOUL, SEOUL-T'UKPYOLSI, KR. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:29:00 Win2K-f 61.60.186.5 (ISL.NET.TW):
SAVECOM INTERNATIONAL INC,
TAIPEI, T'AI-PEI, TW. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:35:00 Win2K-f 42.112.17.17 (-):
. n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
24 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:42:00 Win2K-f 66.161.174.187 (FUSE.NET):
FUSE INTERNET ACCESS,
CINCINNATI, OHIO, US. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:48:00 Win2K-f 78.108.253.224 (LINKBG.COM):
LINK BG INTERNET PROVIDER IN DOBRICH,
SOFIA, GRAD SOFIYA, BG. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

08:54:00 Win2K-f 83.172.21.188 (SIBINET.COM):
SIBINET LTD ISP IN TOMSK,
TOMSK, TOMSK, RU. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

09:00:00 Win2K-f 198.15.110.133 (-):
. n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

09:07:00 Win2K-f 95.28.108.72 (CORBINA.RU):
INVESTELEKTROSVIAZ LTD,
MOSCOW, MOSCOW CITY, RU. (100Mbps) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
25 lines Argh : 0.3
profile none summary
tarball none none none none none none none

T:09:47:00 WinXP 180.215.85.146 (-):
. n/a DE:citi-bank.ru
DE:213.155.14.161:80 445 pcap raw alerts
ruleset http
1 line Yeah : 0.8
profile none summary
tarball 26 of 28 7d99b0e910
NEW none[0] none:none
PolyEnE| lines=68 trace

11:05:00 Win2K-f 200.31.173.58 (SALNET.NET):
EL SALVADOR NETWORK S. A,
SAN SALVADOR, SAN SALVADOR, SV. (DSL) n/a :www.maxmind.com
:www.getmyip.org
EU:checkip.dyndns.org
DE:131.220.6.26:80 445 pcap raw alerts
ruleset http
5 lines Yeah : 0.8
profile none summary
tarball 3 of 37 d9cb288f31
NEW 45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns trace

13:35:00 Win2K-f 180.222.216.203 (-):
. n/a :www.maxmind.com
:www.getmyip.org
:getmyip.co.uk
US:checkip.dyndns.org
174.36.207.186:80
EU:91.198.22.70:80 445 pcap raw alerts
ruleset http
1 line Yeah : 0.8
profile none summary
tarball 3 of 37 d9cb288f31
NEW 45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns trace

14:21:00 Win2K-f 186.247.50.196 (-):
. n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

14:34:00 Win2K-f 118.98.31.198 (TELKOM.NET.ID):
PT TELEKOMUNIKASI INDONESIA,
ID. (DSL) n/a :www.maxmind.com
:www.getmyip.org
US:checkip.dyndns.org
:getmyip.co.uk
174.36.207.186:80
EU:91.198.22.70:80 445 pcap raw alerts
ruleset http
1 line Yeah : 0.8
profile none summary
tarball 3 of 37 d9cb288f31
NEW 45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns trace

14:45:00 Win2K-f 95.87.17.168 (-):
TRAKIA CABLE LTD,
BG. (DSL) n/a US:www.yahoo.com
:qcluwshe.info
:alsltpealt.com
US:fueojlswgyl.biz
US:rtkajxpmer.biz
:djrovbs.org
:nbflknor.info
:cnvcw.info
:nzbohshsda.org
:oxeac.net
:bjzzlffzvsp.org
:gqekgqvu.net
:eabyao.net
:qkmoe.com
:pelify.info
:mquwdnail.com
:vlgjnx.info
:xcwyvi.org
:yuubfd.com
:mlgiipy.net
US:ykeyof.biz
:qqglsb.org
:rcgzhhrx.org
:ocjswgysb.info
US:nbehspsmi.biz
:vcbvqmxhja.info
:iaxqu.com
:xdhlprny.info
:etmvruqo.net
:urlgzbi.net
:lspqz.com
:kewmf.info
US:rcpiqxyff.biz
:smahlhtrm.org
:fqiadgfdt.info
:yqjwtyji.info
:ncsfrlijt.com
:vsrrxuzjyo.org
:vgydhgodv.com
:qczmernuh.info
:tvjbbxvw.info
:lsnguuii.info
:zggshh.net
:dyviirho.info
:ooxfhpvyhx.net
:fyroxotfhn.org
:vtbxsy.net
US:rxlveq.biz
:jcjjokdwa.com
:fdxwmqkrjyw.org
:neokz.org
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
3 lines Argh : 0.3
profile none summary
tarball none none none none none none none

16:27:00 Win2K-f 95.0.90.30 (-):
TR-TELEKOM,
ANKARA, ANKARA, TR. (DSL) n/a :www.maxmind.com
:www.getmyip.org
EU:checkip.dyndns.org
:getmyip.co.uk
174.36.207.186:80
EU:91.198.22.70:80 445 pcap raw alerts
ruleset http
1 line Yeah : 0.8
profile none summary
tarball 2 of 37 223d8089f8
NEW none[3] none:none
StarForce| none trace

16:40:00 Win2K-f 173.45.69.99 (XLHOST.COM):
XLHOST.COM INC,
COLUMBUS, OHIO, US. (100Mbps) n/a US:www.yahoo.com
US:trafficconverter.biz
:wirsf.info
:vbbpgljpsm.com
:ewsnc.net
:gdqyqpeqw.net
:ytwmha.info
:fniadgki.org
:ncfqobst.com
US:gtlkign.biz
US:pyglovpp.biz
:zauxuhr.com
:twdavghqjdy.org
:ypajjal.com
:dijcbtzz.org
:gevzeamtak.info
:culhbjlko.org
:wlsmykpgws.com
:fuuutiv.info
:efsbwosyxzj.info
:fyehdvdc.net
:cvyuj.info
:jqinpqqdndb.net
:kvkaydov.net
US:nckmtszbjlw.biz
US:itnimcr.biz
:tnyquknnmw.org
:wmxxdkf.com
:umyamiallka.com
US:fuvsx.biz
:phmfnxdo.com
:nutsbp.info
:spigjbzj.org
US:zemkurnikiu.biz
:fqzkzqlt.info
:bdxifpjflat.net
:leshwpyc.net
:vsjnnhl.org
:ycdrogog.com
:avmrkxdtrut.net
:jihol.info
US:lwidrt.biz
:dgnzqycgzvh.net
:rzzdkm.info
:hqeevcdph.com
:dygkgnnskp.info
:wbkngwwwsca.com
:haqinflexer.net
:cjgadhn.org
:udrkri.info
US:bhnqofyjrt.biz
:fhlidammv.net
:mxvliqpaz.info
:ygzfp.net
US:wruefacbw.biz
:qgpyegcr.info
:ehiccsw.net
:wzsfkbee.org
:gmoum.com
:owgpirpmwzw.com
US:ltmizdji.biz
:dwoadoqm.info
US:149.20.56.32:80
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
1 line Argh : 0.3
profile none summary
tarball none none none none none none none

19:45:00 Win2K-f 46.149.42.38 (-):
. n/a US:www.w3.org
:ezcgqv.com
US:gofhng.biz
US:ztfcqbkvw.biz
US:idfkdrshiy.biz
:tsmnxxax.net
US:zdryt.biz
:ulvwoevgm.net
:ggkyybi.com
:keqgrx.org
:ajclsdhnd.org
:rqsexdjcudz.info
:rzzdkm.info
:lrtojklcddz.info
:irmxxafuf.com
:qzkfjnzmxh.org
:mmuufquqpi.net
:hxndfali.org
US:hxruwb.biz
US:kyigl.biz
:rkhecakpsvw.org
:kujvkzimg.org
:bzccnuci.info
:wbkngwwwsca.com
:pyiywern.info
US:itnimcr.biz
:vigxco.com
:otlldudmzs.net
:ymvneztybp.net
:csxarmnj.com
US:mgmqqcofvf.biz
:efsbwosyxzj.info
:irdoj.info
:jihol.info
:iebcjjxbssk.com
:egygtdvmk.info
US:epmokwtf.biz
:mybzl.org
US:gptqy.biz
US:xatxomqn.biz
:wnkmoy.com
:vbbpgljpsm.com
:isyqbgxjlu.com
:jrtpvlleio.com
:bpsfgpttigw.org
:lvpqeopdjx.org
:qphqegnh.org
:ygzfp.net
:whixgtmd.com
:cewlrslm.info
:vztylrbxn.org
:uhafeygco.net
:culhbjlko.org
US:tgupf.biz
:yndgsqra.org
:jqqvncrb.org
:dydeecvqzp.info
:vpfqdnmnfg.com
:tqqfddrnszu.com
:wxdnvosb.com
:jqinpqqdndb.net
US:149.20.56.32:80
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
17 lines Argh : 0.3
profile none summary
tarball none none none none none none none

20:10:00 Win2K-f 95.24.198.232 (CORBINA.RU):
INVESTELEKTROSVIAZ LTD,
MOSCOW, MOSCOW CITY, RU. (DSL) n/a :zauxuhr.com
:keqgrx.org
:wgigmyhr.info
:qmoqfnytmbw.net
:sgorkbt.info
:gtgxvpys.org
US:gofhng.biz
US:moyizcxsc.biz
:mxvliqpaz.info
:ygzfp.net
:ruxycmrt.org
US:pyglovpp.biz
US:madajznjyj.biz
:kjkgvlo.com
:kujvkzimg.org
US:mgmqqcofvf.biz
US:itnimcr.biz
US:ltmizdji.biz
:cjgadhn.org
:wtqgyiq.org
:fniadgki.org
:itpdtcpy.com
:urefdjpeewt.org
:ypajjal.com
:kttzc.com
:ofjonm.org
US:wruefacbw.biz
:yvikgkyir.org
US:roavse.biz
:tvmyxk.net
US:ztfcqbkvw.biz
:qojdzihk.com
:xfehvwvcvp.org
:pyiywern.info
:mybzl.org
US:gptqy.biz
:bdxifpjflat.net
US:qtyzfqrc.biz
:whixgtmd.com
US:uwtoevzb.biz
:nvmootfj.net
:tqqfddrnszu.com
:jqqvncrb.org
US:aryzwqbf.biz
:rfdphfk.com
:bgcehmkq.net
:fqzkzqlt.info
:yferivqeqxr.info
:ktakmyxvkl.com
:ybyww.info
:lvpqeopdjx.org
US:xatxomqn.biz
:fjsqolid.org
US:lhwzqjei.biz
:fjqlerguki.info
:oavzumwjyzx.net
US:scnehqius.biz
:elvldxpsq.net
:biuobhmqp.info
:wlsmykpgws.com
US:149.20.56.32:80
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
1 line Argh : 0.3
profile none summary
tarball none none none none none none none

20:31:00 Win2K-f 113.164.1.35 (LOCALHOST):
VIETNAM POST AND TELECOM CORPORATION,
VN. (DSL) n/a
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
3 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:10:00 Win2K-f 91.93.106.173 (TELETEKTELEKOM.COM):
GLOBAL ILETISIM HIZMETLERI A.S,
IZMIR, IZMIR, TR. (DSL) n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
US:204.152.184.139:80
EE:62.65.192.24:80
EE:62.65.192.25:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:12:00 Win2K-f 202.78.227.6 (MAIL.TRIENMINH.VN):
IP RANGE ALLOCATE FOR DEDICATE SERVER SERVICE OF QTSC,
HO CHI MINH CITY, HO CHI MINH, VN. (100Mbps) n/a EE:www.starman.ee
EE:www.online.if.ee
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:17:00 Win2K-f 210.107.51.11 (BORA.NET):
BORANET-NET,
SEOUL, SEOUL-T'UKPYOLSI, KR. (DSL) n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
EE:62.65.192.24:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:22:00 Win2K-f 190.144.43.51 (DIAKONIACOLOMBIA.ORG):
TELMEX COLOMBIA S.A,
CO. (DSL) n/a EE:www.starman.ee
EE:www.online.if.ee
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:27:00 Win2K-f 190.200.9.247 (CANTV.NET):
CANTV SERVICIOS VENEZUELA,
CARACAS, DISTRITO FEDERAL, VE. (DSL) n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
EE:62.65.192.24:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:32:00 Win2K-f 184.106.114.100 (-):
. n/a EE:www.starman.ee
US:trafficconverter.biz
EE:www.online.if.ee
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:37:00 Win2K-f 184.106.116.208 (-):
. n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
EE:62.65.192.25:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:42:00 Win2K-f 125.0.86.202 (INFOWEB.NE.JP):
FUJITSU LIMITED,
TOKYO, TOKYO, JP. (DSL) n/a EE:www.starman.ee
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
5 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:47:00 Win2K-f 85.192.165.61 (ESOO.RU):
ORENBURG BRANCH OFFICE OF OJSC VOLGATELECOM,
MOSCOW, MOSCOW CITY, RU. (DSL) n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
EE:62.65.192.24:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:52:00 Win2K-f 122.102.43.62 (-):
BD. (DSL) n/a EE:www.online.if.ee
EE:www.starman.ee
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

21:57:00 Win2K-f 117.200.78.171 (10/24.BSNL.IN):
NIB (NATIONAL INTERNET BACKBONE),
NEW DELHI, DELHI, IN. (DSL) n/a EE:www.starman.ee
FI:www.if.ee
FI:194.215.38.135:80
EE:62.65.192.25:80 445 pcap raw alerts
ruleset other
0 lines Argh : 0.3
profile none summary
tarball none none none none none none none

22:50:00 Win2K-f 95.27.200.178 (CORBINA.NET):
INVESTELEKTROSVIAZ LTD,
RU. (DSL) n/a :www.google.com
:jwbwujkcru.net
US:ltmizdji.biz
:vtvpwl.com
:anyabwdn.org
:dyhurqvazq.org
:udrkri.info
:vztylrbxn.org
:leshwpyc.net
:dwoadoqm.info
:kujvkzimg.org
:bknuejfim.info
:mkmyjg.com
:usvwucxycwc.net
:ewsnc.net
:iunla.info
:nutsbp.info
:mxvliqpaz.info
:lrtojklcddz.info
:jkiubg.info
US:mdnknyhf.biz
:tiqwkmjcqq.com
:zvrqv.org
:izvebvqs.info
:qjdufjjqwcf.info
:nvmootfj.net
US:zdryt.biz
:vzioco.org
US:ztfcqbkvw.biz
:hzmqig.net
:keqgrx.org
:gevzeamtak.info
:mybzl.org
:fuuutiv.info
:ogohyv.net
:zcpbavf.org
:qbovygxvl.info
:vzppo.com
:vbbpgljpsm.com
:egygtdvmk.info
:wlsmykpgws.com
:uhafeygco.net
:nzlqhu.net
:ypajjal.com
:eqfdxzpyc.com
:ytwmha.info
:vpnctjqknk.net
US:sefavmr.biz
:dygkgnnskp.info
US:itnimcr.biz
:haqinflexer.net
:dgnrrdw.info
:dijcbtzz.org
:zauxuhr.com
US:idfkdrshiy.biz
:kohqdzt.net
US:nckmtszbjlw.biz
:bdxifpjflat.net
:voqeoouf.info
:vpfqdnmnfg.com
US:hxruwb.biz
US:149.20.56.32:80
US:204.152.184.139:80 445 pcap raw alerts
ruleset http
1 line Argh : 0.3
profile none summary
tarball none none none none none none none

22:59:00 Win2K-f 192.30.139.75 (SPEAKEASY.NET):
US. (DSL) n/a
EE:195.50.195.10:443
EE:62.65.192.24:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none

23:04:00 Win2K-f 78.55.251.28 (ALICEDSL.DE):
HANSENET-ADSL,
WURZBURG, BAYERN, DE. (DSL) n/a
EE:195.50.195.10:443
EE:62.65.192.25:80 445 pcap raw alerts
ruleset http
6 lines Argh : 0.3
profile none summary
tarball none none none none none none none