Alert Table for 2017-11-21-traffic-analysis-exercise-1-of-6.pcap

Relative Time Packet Source Source Port Destination Dest Port Category Rule Set Signature Severity
1.0 14 192.168.1.121 49160 188.225.38.247 80 Exploit Kit Activity Detected ET EXPLOIT_KIT RIG EK URI Struct Jun 13 2017 1
2.0 110 192.168.1.121 49160 188.225.38.247 80 Exploit Kit Activity Detected ET EXPLOIT_KIT RIG EK URI Struct Jun 13 2017 1
4.0 158 192.168.1.121 49163 188.225.38.247 80 Exploit Kit Activity Detected ET EXPLOIT_KIT RIG EK URI Struct Jun 13 2017 1
12.0 538 192.168.1.121 49165 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
13.0 543 192.168.1.121 49165 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
14.0 582 192.168.1.121 49166 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
14.0 586 192.168.1.121 49167 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
14.0 592 192.168.1.121 49168 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
15.0 608 192.168.1.121 49168 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
220.0 929 192.168.1.121 49175 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
220.0 934 192.168.1.121 49175 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
221.0 957 192.168.1.121 49177 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
222.0 965 192.168.1.121 49177 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
222.0 971 192.168.1.121 49176 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
225.0 1004 192.168.1.121 49178 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
431.0 1103 192.168.1.121 49182 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
432.0 1108 192.168.1.121 49182 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
433.0 1131 192.168.1.121 49183 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
433.0 1137 192.168.1.121 49184 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
433.0 1143 192.168.1.121 49185 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
433.0 1148 192.168.1.121 49183 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
638.0 1302 192.168.1.121 49190 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
639.0 1307 192.168.1.121 49190 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
640.0 1330 192.168.1.121 49193 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
641.0 1338 192.168.1.121 49193 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
642.0 1354 192.168.1.121 49192 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
643.0 1367 192.168.1.121 49191 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
848.0 1481 192.168.1.121 49197 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
849.0 1486 192.168.1.121 49197 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
851.0 1523 192.168.1.121 49200 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
851.0 1536 192.168.1.121 49200 194.87.110.230 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
853.0 1578 192.168.1.121 49198 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
853.0 1584 192.168.1.121 49199 217.20.116.142 443 Malware Command and Control Activity Detected ET MALWARE Win32/Ramnit Checkin 1
Alerts provided by Emerging Threats 2022-04-08
Open in new window Done