Result for 254D18655CAA3D5036486A7B082CFF2209EC81FE

Query result

Key	Value
FileSize	177320
MD5	C20D9FAEF10CC45DA0696AB19EC9C6A4
PackageDescription	Port Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainer	Franck Joncourt <franck.joncourt@gmail.com>
PackageName	psad
PackageSection	admin
PackageVersion	2.4.3-1.2~deb9u1
SHA-1	254D18655CAA3D5036486A7B082CFF2209EC81FE
SHA-256	3F62D71A22A246368CFE7520618EDF9B8217046331714BBEC0AB0B04C0793480
hashlookup:children-total	33
hashlookup:trust	50

Network graph view

Children (Total: 33)

The searched file hash includes 33 children files known and seen by metalookup. A sample is included below:

Key	Value
CRC32	08289A7B
FileName	./usr/share/doc/psad/BENCHMARK
FileSize	3563
MD5	AE6C8419113F6B32A13048505A37F7F0
OpSystemCode	362
ProductCode	10075
RDS:package_id	10075
SHA-1	063DA4A16B4EB1AE35B10B1EF335E688B98DD522
SHA-256	E5CF54FFE87CD7E3F4F68C29314B75F5545C2CC93098F809F9160CEBE52DB2AA
SSDEEP	96:KX+SisMnDdD0RsYwZQY3ZV3jsH1a/T9+Ul5g9:KOSGLMo/TgUA9
SpecialCode
TLSH	T1DF718301BDBC3BA6318366323B3C7270C788A77D93242252D58DB1352349D6913F6B82
db	nsrl_legacy
insert-timestamp	1648735417.0709713
source	RDS_2022.03.1_legacy.db

Key	Value
FileName	./usr/share/doc/psad/NEWS.Debian.gz
FileSize	522
MD5	C9A9EF5C8C20C4D85E1096842EDF3D88
SHA-1	075BF33C3D43949C0538A9CC8692148BB3273DCD
SHA-256	B1CEE761F8F6EE612BB0A3B17F098EF3C96855D4D543AD6DD54C291F2760DCB0
SSDEEP	12:XJYdSPxylUBS0sEBpUHZYQq/Z+sheEcbpjr:XJYdSglUDs+28fh6bN
TLSH	T181F0206A4BBB4A629801E4B5E52BB870E047741109028ABA4CDD2A8E35C0180E34D690

Key	Value
FileName	./usr/share/doc/psad/SCAN_LOG
FileSize	1827
MD5	BC6E539FCA350458B7473032126DA6EE
SHA-1	0D15E5442C124C1D7BC1CDDD9433E9C0C2801D1B
SHA-256	992014A60F4C226D7804B85F192722769F162C7A80B23A6F1872EACA734ED9C5
SSDEEP	48:2l31P6SM8jprApG3YZMtO8FufV7lAJATWyVejpM8R:+1gWApgbuNE+U
TLSH	T153314F0BBF0171A9E316C6B105B26152D73963A352570828F5DD83F08F93D72B362BA9

Key	Value
CRC32	984B9036
FileName	etc/psad/protocols
FileSize	2933
MD5	2E1E463038CC62E7110E33E21552751F
OpSystemCode	362
ProductCode	17075
RDS:package_id	17075
SHA-1	0E79926BC6DD519321D563978AA865AEE7467024
SHA-256	234998A1403E45E1B3F263EFB79F7C21E32032B1F7DC65054746DC28F69D2A28
SSDEEP	48:ZzxmX2i8fBK/B1TMSKWhRQs0KxHJFvD74FAMrxAWaW/TTVlsz7Acg6ozHBzc0RW5:7Q2TBCB1ZDd0KjAxAWv//VlWAcab1c8Y
SpecialCode
TLSH	T1475163AED74B17AC01A1D6FAE17D7514DA1F9614D1C0B10C74B0F9DB22830A8C72A1E9
db	nsrl_legacy
insert-timestamp	1648670115.9078636
source	RDS_2022.03.1_legacy.db
tar:gname	root
tar:uname	root

Key	Value
FileName	etc/psad/signatures
FileSize	45267
MD5	B77EA87A33B16327B675ED7AAC2E5935
SHA-1	118A5A51ADA03950E02553ECA2EE7DA5C03005FA
SHA-256	2E54D0E8E49DDB49D822C7C0F173ACF760AC50181E36047717C6359ED5C097B9
SSDEEP	768:gFGfE92g4WR6zi4MpTwmsEjtvhV4QidmsZTZkmzChmZmmSfYwnh8d7gl3nAQv5lP:gFWPAYHC9
TLSH	T11813007C2FFC69F347D3F330584A22FBB05E94525AA30918ABEC5194A7189E5B5213B3
tar:gname	root
tar:uname	root

Key	Value
FileName	etc/psad/auto_dl
FileSize	1161
MD5	B8DC937565BD9BDC36841531F383FAAA
SHA-1	1875E5E3BEB14581C8628A038A3E2B959402494E
SHA-256	29D934D3F7A935FF1CE8997623AF6B81202A0177E787142323759EF76EC58F92
SSDEEP	24:yIjfsTZNvGYOsFNORu4s2Z34PmyQMpIRZ+UOSApBnKHOSDcvSv:hjoZNvVOu+oPZQMpIbTBQnYBDcvc
TLSH	T13021CE9B589321AD031A0248DB4E5156677812E28DB729AD320DDBD82782D203F1FA23
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/share/doc/psad/changelog.Debian.gz
FileSize	7290
MD5	81EB259BE87EE092601B3531BC4B6CA6
SHA-1	268632B3A422826FB0DA4EDAA608B3EE84990915
SHA-256	B278D0FF5CADB9093DF3F99145E8F0B714B8C5CD4B01C3464609899513D05019
SSDEEP	192:C7R2MlbPMZJ1UsO1hId+Qdg8X7gxb8RYSkn+kRXMer:gRhbM21udhX7EbqMTRB
TLSH	T1ABE1AE195B4BB0E0ABE6197536D6CA3B0C59F50127711C0F54B469F9AAAF8023DE27C8

Key	Value
FileName	./usr/sbin/fwcheck_psad
FileSize	21286
MD5	676E14C794C51016FEBA28FA37E681A0
SHA-1	2AF7B93DEB53C6DF0C7640968899C4962924A361
SHA-256	FC12834D2B005818958816E6360A38562816378E19E0FCB191B8F2EBAF9FBF15
SSDEEP	192:hsLmf43QXJa1BvTruUZmxpf6iDQf8aiiV0ovgbyoEtF+yEiQWOmF5fp4Cv2HyK87:7fWQXJa1BrfZwHkRl7eZKIWEiI3S3on4
TLSH	T11CA2A70659DB3D2352A6F43CAFC99124262F41AB4E5BFD297C8CA248AF44874D4F26CD

Key	Value
FileName	./usr/share/man/man8/fwcheck_psad.8.gz
FileSize	742
MD5	98A7083B154F40F52888F59D019F7D3E
SHA-1	3FF82CE6936C47E6E12A4ED4B8C5C20EAB7EFA04
SHA-256	71921BED7E0B9024243A5512101F6F8E7CDBB494DA0530F2F3D97551E1713832
SSDEEP	12:XHi2BQ7KSPuaYzRuyhglEfXYRyHP77bGVlwqybbBr0q9UyptJV4HO:XC29S2aYdRSYP7bGPw7PBr6OtJ+u
TLSH	T1E801657BB5AC35D757C46A5C71D1028B7280AD4441FAF6C30BD1C32484A08FAD0C0C7E

Key	Value
FileName	./usr/share/man/man8/psad.8.gz
FileSize	11767
MD5	46A0FA5294254661510B1AA44727F697
SHA-1	47781BA332E3B9FB84733043590C5D8EB178B8EF
SHA-256	89E569B708AFB79C6FD9FE5EE3F3AB70A576EA41057D24963C0260CFB74C8810
SSDEEP	192:8pivHXFNYnN8Q9TqvyZm0tFqxGkcEmpaVHxb71NiIMl/rJLUrXiBb5eFWYd96RW+:6ivCN8Q9Tqcm0tIxGPoVRb7viIMTUrXI
TLSH	T10B32BFC385461DC5152E2B018BD179CD801D66E73A2B69BC3FA9EB518A449F2E1DEF10