No passive DNS data avaible

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-11-05 19:35:42	high	Client IP	154.213.28.59	ET MALWARE Single char EXE direct download likely trojan (multiple families)
2024-11-05 19:35:42	medium	Client IP	154.213.28.59	ET INFO Executable Download from dotted-quad Host
2024-11-05 19:35:42	high	154.213.28.59	Client IP	ET HUNTING Rejetto HTTP File Sever Response
2024-11-05 19:35:42	high	154.213.28.59	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP
2024-11-05 19:35:42	high	154.213.28.59	Client IP	ET EXPLOIT_KIT DRIVEBY Likely Evil EXE with no referer from HFS webserver (used by Unknown EK)
2024-11-05 19:35:42	medium	154.213.28.59	Client IP	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response
2024-11-05 19:35:42	low	154.213.28.59	Client IP	ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)
2024-11-05 19:35:42	low	154.213.28.59	Client IP	ET INFO EXE - Served Attached HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (0)