Edit tour

Linux Analysis Report
ngwa5.elf

Overview

General Information

Sample name:	ngwa5.elf
Analysis ID:	1580787
MD5:	54935c5492f06ed2b822c448d6aaa745
SHA1:	b7e7e3aecde45a5e2363a8046ec3baa0abff916b
SHA256:	136f5ea9fdd9068d75ae5134f196f5b913d46bf564b53b2342171e3167722fa4
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sends malformed DNS queries

Detected TCP or UDP traffic on non-standard ports

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580787
Start date and time:	2024-12-26 06:02:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ngwa5.elf
Detection:	MAL
Classification:	mal80.troj.evad.linELF@0/1@206/0

Runtime Messages

Command:	/tmp/ngwa5.elf
PID:	6235
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

ngwa5.elf (PID: 6235, Parent: 6160, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/ngwa5.elf

ngwa5.elf New Fork (PID: 6237, Parent: 6235)

ngwa5.elf New Fork (PID: 6239, Parent: 6237)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ngwa5.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
ngwa5.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b11c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b144:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b158:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b16c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b180:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b194:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b20c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b220:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b234:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b248:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b25c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b270:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b284:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b298:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b11c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b144:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b158:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b16c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b180:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b194:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b1f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b20c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b220:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b234:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b248:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b25c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b270:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b284:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b298:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ngwa5.elf PID: 6235	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: ngwa5.elf PID: 6235	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1203b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1204f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12063:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12077:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1208b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1209f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120db:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120ef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12103:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12117:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1212b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1213f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12153:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12167:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1217b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1218f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x121a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x121b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x121cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ngwa5.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: ngwa5.elf	Virustotal: Detection: 34%			Perma Link
Source: ngwa5.elf	ReversingLabs: Detection: 42%

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.cardiacpure.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:38190 -> 178.215.238.25:33966

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43

Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru. [malformed]

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: ngwa5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ngwa5.elf PID: 6235, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/telnetsshwatchdogsshd/usr/compress/bin//compress/bin/compress/usr/bashmain_x86main_x86_64main_mipsmain_mipselmain_armmain_arm5main_arm6main_arm7main_ppcmain_m68kmain_sh4main_spchttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt//tmp/var/mnt/boot/home/dev/..//root(deleted)raw.cardiacpure.ruabcdefghijklmnopqrstuvwxyz/proc/%d/cmdline/proc/%d/proc/self/proc/self/exe

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/ngwa5.elf (PID: 6239)

SIGKILL sent: pid: 2, result: successful

Jump to behavior

Source: ngwa5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ngwa5.elf PID: 6235, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.troj.evad.linELF@0/1@206/0

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/ngwa5.elf (PID: 6237)

File: /tmp/ngwa5.elf

Jump to behavior

Source: /tmp/ngwa5.elf (PID: 6235)

Queries kernel information via 'uname':

Jump to behavior

Source: ngwa5.elf, 6235.1.00005582c3aa0000.00005582c3bce000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: ngwa5.elf, 6235.1.00007ffd08133000.00007ffd08154000.rw-.sdmp	Binary or memory string: e6x86_64/usr/bin/qemu-arm/tmp/ngwa5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ngwa5.elf
Source: ngwa5.elf, 6235.1.00005582c3aa0000.00005582c3bce000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: ngwa5.elf, 6235.1.00007ffd08133000.00007ffd08154000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: ngwa5.elf, 6235.1.00007ffd08133000.00007ffd08154000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.yCQjtD:u
Source: ngwa5.elf, 6235.1.00007ffd08133000.00007ffd08154000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.yCQjtD

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: ngwa5.elf, type: SAMPLE
Source: Yara match	File source: 6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 6235, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: ngwa5.elf, type: SAMPLE
Source: Yara match	File source: 6235.1.00007fcd60017000.00007fcd60035000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 6235, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ngwa5.elf	35%	Virustotal		Browse
ngwa5.elf	42%	ReversingLabs	Linux.Backdoor.Mirai
ngwa5.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.cardiacpure.ru	178.215.238.25	true	false		high
raw.cardiacpure.ru. [malformed]	unknown	unknown	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
178.215.238.25	raw.cardiacpure.ru	Germany	10753	LVLT-10753US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
178.215.238.25	fnkea7.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	fnkea7.elf	Get hash	malicious	Mirai	Browse
	xd.arm5.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	woega6.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	bin.sh.elf	Get hash	malicious	Unknown	Browse
	main_x86_64.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	fnkea7.elf	Get hash	malicious	Mirai	Browse
	xd.arm5.elf	Get hash	malicious	Mirai	Browse
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	woega6.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	bin.sh.elf	Get hash	malicious	Unknown	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.cardiacpure.ru	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	kqibeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	fnkea7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	xd.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	wkb86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	woega6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wlw68k.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	njvwa4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	fnkea7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	xd.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	wkb86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	woega6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wlw68k.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	njvwa4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
LVLT-10753US	fnkea7.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	armv6l.elf	Get hash	malicious	Mirai	Browse	217.22.7.57
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	94.154.174.150
	nshmpsl.elf	Get hash	malicious	Mirai	Browse	45.129.149.6
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	147.207.230.32
INIT7CH	fnkea7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	xd.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	wkb86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	woega6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	njvwa4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	bin.sh.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.yCQjtD (deleted)

Download File

Process:	/tmp/ngwa5.elf
File Type:	data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	4.0536606896881855
Encrypted:	false
SSDEEP:	3:TgOQLc8HJN:TgZJN
MD5:	AC250E3F00CC16907E0D589F2DC53826
SHA1:	C3458BAC504BEC0C4984AC81CB405E3FA8A96257
SHA-256:	9A16E706CBABA4731AF89B10A86B099D0F4FDD20140FBEEBFB27AFF963B03953
SHA-512:	CE0732E2BD36BEAE0158C7BEB599F222C0ACB3618BE2EC3EA7C32E17AE258CCD0E1626CA5DACA727C64EC060FFB3F20274F94929AE0D2D239981F7C168BE2797
Malicious:	false
Reputation:	low
Preview:	/tmp/ngwa5.elf.nwlrbbmqbh

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.571239745113439
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ngwa5.elf
File size:	142'176 bytes
MD5:	54935c5492f06ed2b822c448d6aaa745
SHA1:	b7e7e3aecde45a5e2363a8046ec3baa0abff916b
SHA256:	136f5ea9fdd9068d75ae5134f196f5b913d46bf564b53b2342171e3167722fa4
SHA512:	beda1bc9a6aa6f3351e5f185bf0b6551373b81247e41514a54a2c5d3d8eab6422f8bb7549cf40ab813e35b29b0719be06659c41512c6cfe0025f9af73a2cd788
SSDEEP:	1536:UjfDx+FfkzWIVEjHFmkT0PRHA7HEQ4V3c5TD0h1lGDlQ39fiE8HXluuwywMzrzV4:UjfyinVWnTSRHw4q5i1lGCNaxzN5T2
TLSH:	15D3F945F8519E13C6D612BBFB5E428D3B2A17E8D3EE71039D216F21378685B0E37A42
File Content Preview:	.ELF...a..........(.........4....)......4. ...(.....................h...h............................I..D...........Q.td..................................-...L."....k..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	141776
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1af64	0x0	0x6	AX	16
.fini	PROGBITS	0x23014	0x1b014	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x23028	0x1b028	0x2f40	0x0	0x2	A	4
.ctors	PROGBITS	0x2e000	0x1e000	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x2e00c	0x1e00c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x2e020	0x1e020	0x4970	0x0	0x3	WA	32
.bss	NOBITS	0x32990	0x22990	0x45b4	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x22990	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x1df68	0x1df68	6.0578	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x1e000	0x2e000	0x2e000	0x4990	0x8f44	0.4659	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 06:02:53.013324976 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 06:02:53.256721020 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:53.376275063 CET	33966	38190	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:53.376470089 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:53.379199028 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:53.498632908 CET	33966	38190	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:53.498697996 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:53.618146896 CET	33966	38190	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:54.641475916 CET	33966	38190	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:54.641558886 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:54.641776085 CET	38190	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:55.886639118 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:56.006186008 CET	33966	38192	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:56.006280899 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:56.007976055 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:56.127605915 CET	33966	38192	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:56.127659082 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:56.247205019 CET	33966	38192	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:57.273128033 CET	33966	38192	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:57.273202896 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:57.273298979 CET	38192	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:58.510863066 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:58.630419970 CET	33966	38194	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:58.630548000 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:58.631548882 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:58.644556046 CET	42836	443	192.168.2.23	91.189.91.43
Dec 26, 2024 06:02:58.751086950 CET	33966	38194	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:58.751266956 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:58.870857954 CET	33966	38194	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:59.668565035 CET	42516	80	192.168.2.23	109.202.202.202
Dec 26, 2024 06:02:59.895476103 CET	33966	38194	178.215.238.25	192.168.2.23
Dec 26, 2024 06:02:59.895720005 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:02:59.895720005 CET	38194	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:01.131304026 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:01.250840902 CET	33966	38196	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:01.251069069 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:01.251838923 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:01.371490955 CET	33966	38196	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:01.371650934 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:01.491151094 CET	33966	38196	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:02.517215014 CET	33966	38196	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:02.517362118 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:02.517396927 CET	38196	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:03.752558947 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:03.872170925 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:03.872371912 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:03.873040915 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:03.992461920 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:03.992775917 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:04.112308025 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:05.138843060 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:05.139024973 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:05.139024973 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:06.375900030 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:06.495446920 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:06.495512962 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:06.496299028 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:06.734553099 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:06.734791040 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:06.854208946 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:07.760176897 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:07.760308027 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:07.760346889 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:08.999650955 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:09.119271040 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:09.119330883 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:09.120363951 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:09.240185976 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:09.240361929 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:09.359832048 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:10.385417938 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:10.385468006 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:10.385544062 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:11.621709108 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:11.741245031 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:11.741452932 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:11.742146015 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:11.861735106 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:11.861982107 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:11.981503010 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:13.007982969 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:13.008171082 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:13.008171082 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:14.002455950 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 06:03:14.249372005 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:14.368894100 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:14.369061947 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:14.369801998 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:14.489295006 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:14.489403009 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:14.608890057 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:15.633805990 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:15.633994102 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:15.633994102 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:16.867029905 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:16.986727953 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:16.986928940 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:16.987556934 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:17.107199907 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:17.107440948 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:17.227103949 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:18.251976967 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:18.252180099 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:18.252264977 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:19.490537882 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:19.610150099 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:19.610383034 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:19.611252069 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:19.730725050 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:19.730822086 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:19.850445032 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:20.876065969 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:20.876326084 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:20.876404047 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:22.113270044 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:22.232968092 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:22.233048916 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:22.233756065 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:22.353226900 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:22.353485107 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:22.473179102 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:23.499556065 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:23.499634027 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:23.499682903 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:24.241146088 CET	42836	443	192.168.2.23	91.189.91.43
Dec 26, 2024 06:03:24.738240957 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:24.858156919 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:24.858339071 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:24.859637022 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:24.979281902 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:24.979473114 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:25.099160910 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:26.122721910 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:26.122857094 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:26.122906923 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:27.365204096 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:27.484802961 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:27.485013962 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:27.486424923 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:27.605901957 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:27.606045008 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:27.725697041 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:28.750474930 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:28.750566006 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:28.750622034 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:29.989166021 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:30.109050035 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:30.109205008 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:30.110460997 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:30.230110884 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:30.230232000 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:30.349750042 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:30.384246111 CET	42516	80	192.168.2.23	109.202.202.202
Dec 26, 2024 06:03:31.375031948 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:31.375201941 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:31.375248909 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:32.615991116 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:32.736082077 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:32.736157894 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:32.737232924 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:32.856734991 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:32.856894970 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:32.976452112 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:34.000734091 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:34.000818968 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:34.000855923 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:35.237818003 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:35.357428074 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:35.357487917 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:35.358623981 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:35.478212118 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:35.478297949 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:35.597804070 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:36.621577978 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:36.621658087 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:36.621786118 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:37.858298063 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:37.978003025 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:37.978349924 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:37.979834080 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:38.099395037 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:38.099476099 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:38.219240904 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:39.242486954 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:39.242782116 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:39.242924929 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:40.479557037 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:40.599131107 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:40.599370956 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:40.600744963 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:40.720313072 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:40.720583916 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:40.840162039 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:41.864345074 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:41.864607096 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:41.864746094 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:43.105216980 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:43.224838018 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:43.224932909 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:43.226476908 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:43.346096039 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:43.346348047 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:43.466067076 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:44.492024899 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:44.492219925 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:44.492573977 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:45.732147932 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:45.851944923 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:45.852096081 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:45.853507042 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:45.973066092 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:45.973258018 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:46.092967987 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:47.140384912 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:47.140717030 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:47.140911102 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:48.384339094 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:48.503931999 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:48.504014015 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:48.505163908 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:48.624681950 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:48.624795914 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:48.744386911 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:49.769484997 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:49.769725084 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:49.769925117 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:51.010624886 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:51.130414009 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:51.130589008 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:51.133527994 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:51.254317045 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:51.254538059 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:51.374033928 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:52.395436049 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:52.395637989 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:52.395792961 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:53.637116909 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:53.756833076 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:53.756920099 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:53.758291006 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:53.877837896 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:53.878047943 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:53.997606039 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:54.957055092 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 06:03:55.022651911 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:55.022789955 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:55.022903919 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:56.265326023 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:56.387144089 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:56.387631893 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:56.388969898 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:56.509746075 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:56.509933949 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:56.630845070 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:57.657694101 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:57.657968998 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:57.658058882 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:58.897706985 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:59.017386913 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:59.017503023 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:59.018136978 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:59.137614012 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 06:03:59.137794971 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:03:59.257343054 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:00.282526970 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:00.282818079 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:00.282993078 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:01.516699076 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:01.636324883 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:01.636719942 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:01.637290001 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:01.756860971 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:01.756952047 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:01.876517057 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:02.902323008 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:02.902808905 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:02.902810097 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:04.139758110 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:04.260407925 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:04.260545969 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:04.261730909 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:04.381331921 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:04.381454945 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:04.500988960 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:05.527235985 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:05.527410984 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:05.527525902 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:06.764682055 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:06.884272099 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:06.884444952 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:06.885540962 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:07.005042076 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:07.005168915 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:07.125226021 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:08.149275064 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:08.149504900 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:08.149590969 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:09.391813993 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:09.511476994 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:09.511656046 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:09.512655020 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:09.632195950 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:09.632618904 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:09.752232075 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:10.776842117 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:10.777081966 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:10.777081966 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:12.018433094 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:12.138366938 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:12.138523102 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:12.139888048 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:12.259502888 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:12.260066986 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:12.379726887 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:13.403374910 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:13.403618097 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:13.403932095 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:14.642543077 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:14.762661934 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:14.762981892 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:14.764343977 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:14.883876085 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:14.884115934 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:15.003865957 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:15.434119940 CET	42836	443	192.168.2.23	91.189.91.43
Dec 26, 2024 06:04:16.027534008 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:16.027636051 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:16.027791977 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:17.265389919 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:17.384959936 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:17.385159016 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:17.386450052 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:17.505945921 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:17.506071091 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:17.625670910 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:34.992640972 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:34.992909908 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:35.112826109 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:37.233882904 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:37.353418112 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:37.353549957 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:37.354904890 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:37.474365950 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:37.474522114 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:37.594122887 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:38.618438005 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:38.618688107 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:38.618688107 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:39.857018948 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:39.976574898 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:39.976671934 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:39.977782965 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:40.097340107 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:40.097601891 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:40.217211008 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:41.241267920 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:41.241513968 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:41.241760969 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:42.484422922 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:42.604146004 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:42.604370117 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:42.605632067 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:42.725231886 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:42.725557089 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:42.845247984 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:43.869585991 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:43.870009899 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:43.870009899 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:45.116084099 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:45.236124039 CET	33966	38262	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:45.236244917 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:45.237845898 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:45.357379913 CET	33966	38262	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:45.357711077 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:45.477385998 CET	33966	38262	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:46.500910997 CET	33966	38262	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:46.501025915 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:46.501071930 CET	38262	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:47.748543978 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:47.868326902 CET	33966	38264	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:47.868685007 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:47.870074034 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:47.989742041 CET	33966	38264	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:47.990063906 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:48.109970093 CET	33966	38264	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:49.133071899 CET	33966	38264	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:49.133349895 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:49.133487940 CET	38264	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:50.833151102 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:50.952795029 CET	33966	38266	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:50.952991962 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:50.954591036 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:51.074121952 CET	33966	38266	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:51.074395895 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:51.194150925 CET	33966	38266	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:52.219088078 CET	33966	38266	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:52.219366074 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:52.219469070 CET	38266	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:53.465146065 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:53.584722042 CET	33966	38268	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:53.584862947 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:53.586334944 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:53.705863953 CET	33966	38268	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:53.705946922 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:53.825532913 CET	33966	38268	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:54.851651907 CET	33966	38268	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:54.852061033 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:54.852261066 CET	38268	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:56.095067978 CET	38270	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:56.214649916 CET	33966	38270	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:56.214790106 CET	38270	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:56.216278076 CET	38270	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:56.335866928 CET	33966	38270	178.215.238.25	192.168.2.23
Dec 26, 2024 06:04:56.336215973 CET	38270	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 06:04:56.455770016 CET	33966	38270	178.215.238.25	192.168.2.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 06:02:52.398744106 CET	58204	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:52.636353970 CET	53	58204	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:52.638252974 CET	47368	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:52.760509014 CET	53	47368	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:52.761915922 CET	50261	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:52.884243011 CET	53	50261	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:52.885647058 CET	54740	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:53.007843018 CET	53	54740	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:53.009232044 CET	51688	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:53.131889105 CET	53	51688	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:53.133479118 CET	57617	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:53.255845070 CET	53	57617	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:54.642968893 CET	40113	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:54.765110970 CET	53	40113	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:54.767396927 CET	42485	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:54.889631033 CET	53	42485	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:54.891956091 CET	52079	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.014233112 CET	53	52079	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.016071081 CET	38112	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.141838074 CET	53	38112	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.143193960 CET	44740	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.267201900 CET	53	44740	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.268630981 CET	58059	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.390949965 CET	53	58059	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.392677069 CET	53895	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.515039921 CET	53	53895	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.516774893 CET	59262	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.639358997 CET	53	59262	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.640309095 CET	50633	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.762490034 CET	53	50633	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:55.763669014 CET	50995	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:55.885854959 CET	53	50995	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.275218010 CET	34764	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:57.397392035 CET	53	34764	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.398638964 CET	38470	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:57.521009922 CET	53	38470	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.522182941 CET	53004	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:57.645006895 CET	53	53004	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.646100044 CET	41440	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:57.768235922 CET	53	41440	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.769362926 CET	60088	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:57.891757011 CET	53	60088	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:57.892997980 CET	54238	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:58.015260935 CET	53	54238	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:58.017230988 CET	41899	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:58.140527010 CET	53	41899	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:58.141530991 CET	50945	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:58.263744116 CET	53	50945	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:58.265074968 CET	47009	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:58.387303114 CET	53	47009	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:58.388067961 CET	37232	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:02:58.510226011 CET	53	37232	8.8.8.8	192.168.2.23
Dec 26, 2024 06:02:59.896584988 CET	41146	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.018999100 CET	53	41146	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.020415068 CET	49583	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.142838001 CET	53	49583	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.143702984 CET	48291	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.266222954 CET	53	48291	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.267008066 CET	45998	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.389297009 CET	53	45998	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.390161991 CET	33665	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.512531042 CET	53	33665	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.513506889 CET	51431	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.637430906 CET	53	51431	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.638540030 CET	43276	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.760723114 CET	53	43276	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.762038946 CET	50985	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:00.884193897 CET	53	50985	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:00.885221958 CET	49352	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:01.007433891 CET	53	49352	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:01.008461952 CET	58540	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:01.130743027 CET	53	58540	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:02.518316984 CET	37371	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:02.640481949 CET	53	37371	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:02.641697884 CET	39452	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:02.764049053 CET	53	39452	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:02.765022993 CET	41845	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:02.887207031 CET	53	41845	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:02.888536930 CET	53440	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.010868073 CET	53	53440	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.011682987 CET	59055	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.133878946 CET	53	59055	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.134979963 CET	59575	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.257206917 CET	53	59575	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.258296967 CET	40007	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.382066011 CET	53	40007	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.383168936 CET	59715	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.505590916 CET	53	59715	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.506937981 CET	54423	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.629159927 CET	53	54423	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:03.629784107 CET	52986	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:03.752005100 CET	53	52986	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.139755011 CET	60500	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.262084961 CET	53	60500	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.262839079 CET	42879	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.386379004 CET	53	42879	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.387362003 CET	36634	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.509625912 CET	53	36634	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.510802984 CET	43917	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.633518934 CET	53	43917	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.634304047 CET	33499	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.758188009 CET	53	33499	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.759063959 CET	49716	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:05.881377935 CET	53	49716	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:05.882261038 CET	44811	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:06.005682945 CET	53	44811	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:06.006676912 CET	38362	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:06.129082918 CET	53	38362	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:06.130145073 CET	46354	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:06.252338886 CET	53	46354	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:06.253129959 CET	36554	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:06.375439882 CET	53	36554	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:07.761125088 CET	44855	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:07.883656979 CET	53	44855	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:07.884465933 CET	42427	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.006867886 CET	53	42427	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.007915974 CET	48849	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.130403996 CET	53	48849	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.131222010 CET	51887	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.253614902 CET	53	51887	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.254592896 CET	40428	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.376921892 CET	53	40428	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.377784014 CET	59596	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.499985933 CET	53	59596	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.500649929 CET	57408	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.628972054 CET	53	57408	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.629919052 CET	39082	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.752049923 CET	53	39082	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.753122091 CET	40998	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.875353098 CET	53	40998	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:08.876517057 CET	45662	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:08.998847961 CET	53	45662	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:10.386524916 CET	52180	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:10.508796930 CET	53	52180	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:10.509727001 CET	50032	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:10.632045984 CET	53	50032	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:10.633018970 CET	33801	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:10.755311012 CET	53	33801	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:10.756251097 CET	33394	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:10.881570101 CET	53	33394	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:10.882524967 CET	40012	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.004854918 CET	53	40012	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:11.006073952 CET	53574	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.128366947 CET	53	53574	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:11.129307985 CET	46287	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.251527071 CET	53	46287	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:11.252640963 CET	46994	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.374831915 CET	53	46994	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:11.375701904 CET	43202	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.497951984 CET	53	43202	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:11.498874903 CET	47176	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:11.621061087 CET	53	47176	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.008796930 CET	60492	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.131108999 CET	53	60492	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.131922007 CET	55419	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.254260063 CET	53	55419	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.254991055 CET	58219	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.377433062 CET	53	58219	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.378348112 CET	50344	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.500662088 CET	53	50344	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.501463890 CET	50758	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.623744965 CET	53	50758	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.624443054 CET	49890	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.746612072 CET	53	49890	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.747523069 CET	53985	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.869765043 CET	53	53985	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.870771885 CET	55630	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:13.993108034 CET	53	55630	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:13.993928909 CET	52561	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:14.116169930 CET	53	52561	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:14.117017984 CET	59460	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:14.248840094 CET	53	59460	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:15.634634018 CET	60964	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:15.756942987 CET	53	60964	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:15.757880926 CET	35369	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:15.880290031 CET	53	35369	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:15.881006956 CET	54855	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.003406048 CET	53	54855	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.004273891 CET	45877	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.126672029 CET	53	45877	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.127603054 CET	43848	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.250085115 CET	53	43848	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.251156092 CET	57430	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.373368025 CET	53	57430	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.374232054 CET	60096	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.496468067 CET	53	60096	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.497164011 CET	37880	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.619582891 CET	53	37880	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.620448112 CET	33634	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.743061066 CET	53	33634	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:16.743947983 CET	38257	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:16.866260052 CET	53	38257	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.253515005 CET	35665	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.375746012 CET	53	35665	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.376792908 CET	59493	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.499900103 CET	53	59493	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.500977993 CET	47946	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.623357058 CET	53	47946	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.624290943 CET	33924	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.746690035 CET	53	33924	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.747663021 CET	57766	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.870157003 CET	53	57766	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.871285915 CET	38557	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:18.994863033 CET	53	38557	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:18.995924950 CET	50350	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:19.118532896 CET	53	50350	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:19.119667053 CET	38884	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:19.242031097 CET	53	38884	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:19.243449926 CET	56703	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:19.365833044 CET	53	56703	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:19.366965055 CET	44303	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:19.489692926 CET	53	44303	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:20.877270937 CET	51156	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:20.999557018 CET	53	51156	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.000766039 CET	58511	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.123163939 CET	53	58511	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.124157906 CET	53114	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.246577024 CET	53	53114	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.248286009 CET	35793	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.370981932 CET	53	35793	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.371918917 CET	45062	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.495440960 CET	53	45062	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.496624947 CET	60564	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.618940115 CET	53	60564	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.619890928 CET	56742	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.742192030 CET	53	56742	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.743206978 CET	60712	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.865480900 CET	53	60712	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.866616011 CET	35764	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:21.989111900 CET	53	35764	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:21.990297079 CET	47133	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:22.112788916 CET	53	47133	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:23.500479937 CET	34448	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:23.622868061 CET	53	34448	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:23.623912096 CET	38152	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:23.746530056 CET	53	38152	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:23.747688055 CET	34437	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:23.870240927 CET	53	34437	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:23.871359110 CET	56618	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:23.993792057 CET	53	56618	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:23.995028019 CET	40071	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.117794037 CET	53	40071	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:24.119270086 CET	56331	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.242041111 CET	53	56331	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:24.243184090 CET	38787	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.365673065 CET	53	38787	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:24.366967916 CET	36589	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.489593029 CET	53	36589	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:24.490714073 CET	36185	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.613262892 CET	53	36185	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:24.614670992 CET	38277	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:24.737420082 CET	53	38277	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.126233101 CET	47466	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.248465061 CET	53	47466	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.250052929 CET	43916	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.372517109 CET	53	43916	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.374176979 CET	46833	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.496562004 CET	53	46833	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.498172045 CET	60812	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.620594978 CET	53	60812	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.621823072 CET	51254	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.744144917 CET	53	51254	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.745969057 CET	34339	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.868240118 CET	53	34339	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.869777918 CET	52351	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:26.992178917 CET	53	52351	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:26.993928909 CET	59124	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:27.116355896 CET	53	59124	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:27.117852926 CET	56377	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:27.240439892 CET	53	56377	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:27.241949081 CET	46381	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:27.364306927 CET	53	46381	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:28.751435041 CET	33439	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:28.873729944 CET	53	33439	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:28.875001907 CET	46672	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:28.997297049 CET	53	46672	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:28.998517036 CET	52536	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.120958090 CET	53	52536	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.122309923 CET	52770	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.244863033 CET	53	52770	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.246464968 CET	44691	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.369154930 CET	53	44691	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.370162964 CET	46136	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.492476940 CET	53	46136	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.494074106 CET	58724	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.616514921 CET	53	58724	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.618005037 CET	47688	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.740289927 CET	53	47688	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.742010117 CET	54405	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.864404917 CET	53	54405	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:29.866177082 CET	57851	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:29.988562107 CET	53	57851	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.376666069 CET	36487	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:31.499016047 CET	53	36487	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.500745058 CET	36149	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:31.623039961 CET	53	36149	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.624389887 CET	34897	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:31.746783018 CET	53	34897	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.748233080 CET	53919	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:31.870628119 CET	53	53919	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.871886969 CET	33206	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:31.994143009 CET	53	33206	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:31.995392084 CET	50718	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:32.118834019 CET	53	50718	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:32.120068073 CET	39580	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:32.242510080 CET	53	39580	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:32.244040012 CET	37491	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:32.367786884 CET	53	37491	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:32.369400978 CET	47673	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:32.491681099 CET	53	47673	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:32.492973089 CET	35545	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:32.615180016 CET	53	35545	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.002027988 CET	55111	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.124356985 CET	53	55111	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.125731945 CET	53609	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.248016119 CET	53	53609	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.249224901 CET	42160	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.371598005 CET	53	42160	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.373115063 CET	41010	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.495405912 CET	53	41010	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.496882915 CET	44882	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.619246006 CET	53	44882	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.620603085 CET	56084	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.742953062 CET	53	56084	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.744343042 CET	35562	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.866735935 CET	53	35562	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.868091106 CET	49299	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:34.990345001 CET	53	49299	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:34.991524935 CET	48904	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:35.113919020 CET	53	48904	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:35.114828110 CET	46051	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:35.237142086 CET	53	46051	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:36.622884989 CET	39505	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:36.746041059 CET	53	39505	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:36.747427940 CET	56736	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:36.869735003 CET	53	56736	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:36.870961905 CET	54129	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:36.993253946 CET	53	54129	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:36.994625092 CET	42185	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.117038965 CET	53	42185	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.117944956 CET	44200	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.240360975 CET	53	44200	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.241334915 CET	39547	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.363529921 CET	53	39547	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.364469051 CET	33652	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.487050056 CET	53	33652	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.488149881 CET	60921	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.610390902 CET	53	60921	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.611763954 CET	55732	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.734033108 CET	53	55732	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:37.735057116 CET	51967	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:37.857352018 CET	53	51967	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.244246006 CET	38267	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.366555929 CET	53	38267	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.367621899 CET	52927	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.489986897 CET	53	52927	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.491161108 CET	55551	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.613395929 CET	53	55551	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.614752054 CET	45778	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.737039089 CET	53	45778	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.738322020 CET	59199	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.860661983 CET	53	59199	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.862086058 CET	37345	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:39.984556913 CET	53	37345	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:39.986002922 CET	40768	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:40.108520985 CET	53	40768	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:40.109652042 CET	46189	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:40.231897116 CET	53	46189	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:40.232795954 CET	45518	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:40.355134964 CET	53	45518	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:40.356359005 CET	56304	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:40.478794098 CET	53	56304	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:41.866134882 CET	45864	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:41.988409042 CET	53	45864	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:41.990139961 CET	35526	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.112618923 CET	53	35526	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.114121914 CET	37445	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.236572027 CET	53	37445	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.237956047 CET	37212	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.360317945 CET	53	37212	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.361867905 CET	40634	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.484242916 CET	53	40634	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.485972881 CET	46193	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.608263969 CET	53	46193	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.609878063 CET	38225	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.732148886 CET	53	38225	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.733356953 CET	55712	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.855638027 CET	53	55712	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.857347012 CET	47704	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:42.979625940 CET	53	47704	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:42.980848074 CET	48752	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:43.104152918 CET	53	48752	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:44.493840933 CET	53334	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:44.616132021 CET	53	53334	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:44.617733955 CET	39595	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:44.740712881 CET	53	39595	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:44.742605925 CET	34036	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:44.865077972 CET	53	34036	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:44.866602898 CET	49371	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:44.988943100 CET	53	49371	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:44.990586042 CET	47929	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.113084078 CET	53	47929	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:45.114419937 CET	33635	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.236754894 CET	53	33635	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:45.238384008 CET	51966	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.360771894 CET	53	51966	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:45.362004995 CET	47092	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.484309912 CET	53	47092	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:45.485462904 CET	42505	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.607798100 CET	53	42505	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:45.609196901 CET	54196	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:45.731482029 CET	53	54196	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.142435074 CET	57684	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.264823914 CET	53	57684	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.266231060 CET	41628	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.388735056 CET	53	41628	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.391014099 CET	34327	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.513484955 CET	53	34327	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.515340090 CET	58264	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.637758970 CET	53	58264	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.639614105 CET	36671	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.762203932 CET	53	36671	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.764575958 CET	47541	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:47.887412071 CET	53	47541	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:47.888623953 CET	36826	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:48.010952950 CET	53	36826	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:48.012650013 CET	49455	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:48.134936094 CET	53	49455	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:48.136611938 CET	37506	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:48.259035110 CET	53	37506	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:48.260909081 CET	42800	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:48.383301973 CET	53	42800	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:49.771044016 CET	36199	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:49.893384933 CET	53	36199	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:49.894896030 CET	55437	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.017184019 CET	53	55437	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.018605947 CET	40143	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.141222000 CET	53	40143	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.142888069 CET	48014	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.265280008 CET	53	48014	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.266838074 CET	46162	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.389156103 CET	53	46162	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.390445948 CET	57973	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.512825012 CET	53	57973	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.514442921 CET	52342	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.636953115 CET	53	52342	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.638273954 CET	58678	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.760719061 CET	53	58678	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.762600899 CET	52394	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:50.885062933 CET	53	52394	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:50.887104988 CET	48988	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:51.009625912 CET	53	48988	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:52.397305012 CET	32877	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:52.519599915 CET	53	32877	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:52.520893097 CET	55489	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:52.643225908 CET	53	55489	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:52.645016909 CET	57125	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:52.767333984 CET	53	57125	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:52.768837929 CET	37550	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:52.891263008 CET	53	37550	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:52.892818928 CET	48170	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.015235901 CET	53	48170	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:53.016829014 CET	53438	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.139197111 CET	53	53438	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:53.140592098 CET	53762	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.263089895 CET	53	53762	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:53.264555931 CET	57888	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.388065100 CET	53	57888	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:53.389565945 CET	44385	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.511910915 CET	53	44385	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:53.513423920 CET	33306	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:53.635874987 CET	53	33306	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.024497986 CET	33137	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.146792889 CET	53	33137	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.148494005 CET	44699	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.270783901 CET	53	44699	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.273170948 CET	57390	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.395524025 CET	53	57390	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.397341013 CET	42669	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.519666910 CET	53	42669	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.521619081 CET	44097	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.643927097 CET	53	44097	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.645885944 CET	54170	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.768066883 CET	53	54170	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.769908905 CET	48138	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:55.892163992 CET	53	48138	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:55.893999100 CET	57190	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:56.016450882 CET	53	57190	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:56.018402100 CET	58270	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:56.140739918 CET	53	58270	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:56.142028093 CET	49217	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:56.264257908 CET	53	49217	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:57.659188986 CET	40878	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:57.781402111 CET	53	40878	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:57.782325029 CET	56019	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:57.905128002 CET	53	56019	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:57.906778097 CET	51363	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.029151917 CET	53	51363	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.030932903 CET	52084	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.153249025 CET	53	52084	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.154941082 CET	56837	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.277321100 CET	53	56837	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.278986931 CET	33020	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.401212931 CET	53	33020	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.402168989 CET	46202	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.524480104 CET	53	46202	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.526113987 CET	45509	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.649641991 CET	53	45509	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.651304007 CET	49884	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.773567915 CET	53	49884	8.8.8.8	192.168.2.23
Dec 26, 2024 06:03:58.774409056 CET	34506	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:03:58.896795988 CET	53	34506	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.283607960 CET	35538	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:00.405942917 CET	53	35538	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.406820059 CET	57458	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:00.529120922 CET	53	57458	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.530185938 CET	59489	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:00.652479887 CET	53	59489	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.653539896 CET	48633	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:00.775809050 CET	53	48633	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.776715040 CET	35675	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:00.899071932 CET	53	35675	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:00.900161028 CET	37735	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:01.022598982 CET	53	37735	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:01.023682117 CET	41705	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:01.146193981 CET	53	41705	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:01.146944046 CET	55019	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:01.269161940 CET	53	55019	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:01.270029068 CET	43620	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:01.392442942 CET	53	43620	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:01.393369913 CET	42959	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:01.516052008 CET	53	42959	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:02.904117107 CET	47287	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.026302099 CET	53	47287	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.027652025 CET	41558	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.149969101 CET	53	41558	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.151302099 CET	40918	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.273592949 CET	53	40918	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.275001049 CET	50871	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.397257090 CET	53	50871	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.398542881 CET	57757	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.520773888 CET	53	57757	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.522161007 CET	55449	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.644551992 CET	53	55449	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.645728111 CET	56650	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.767899990 CET	53	56650	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.769598007 CET	37100	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:03.891803026 CET	53	37100	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:03.893121004 CET	33819	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:04.015372038 CET	53	33819	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:04.016913891 CET	56186	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:04.139280081 CET	53	56186	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:05.528712034 CET	55673	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:05.651112080 CET	53	55673	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:05.652520895 CET	47489	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:05.774866104 CET	53	47489	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:05.776194096 CET	48831	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:05.898556948 CET	53	48831	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:05.900007010 CET	44114	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.022577047 CET	53	44114	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.024573088 CET	42161	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.147447109 CET	53	42161	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.148324966 CET	59658	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.270704031 CET	53	59658	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.272038937 CET	33808	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.394242048 CET	53	33808	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.395181894 CET	55653	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.517482042 CET	53	55653	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.518477917 CET	56758	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.640712023 CET	53	56758	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:06.641597986 CET	48813	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:06.764138937 CET	53	48813	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.150630951 CET	34821	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.274230957 CET	53	34821	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.275199890 CET	51837	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.397521019 CET	53	51837	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.398905039 CET	40478	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.522264004 CET	53	40478	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.524075031 CET	48014	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.646488905 CET	53	48014	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.648006916 CET	55257	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.770282984 CET	53	55257	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.772042036 CET	48355	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:08.894293070 CET	53	48355	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:08.895324945 CET	46109	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:09.017720938 CET	53	46109	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:09.019582033 CET	42500	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:09.141860962 CET	53	42500	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:09.143564939 CET	44756	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:09.265757084 CET	53	44756	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:09.267505884 CET	55513	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:09.390705109 CET	53	55513	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:10.778254986 CET	38758	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:10.900697947 CET	53	38758	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:10.902396917 CET	39896	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.024825096 CET	53	39896	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.026762009 CET	38342	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.149457932 CET	53	38342	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.150962114 CET	53342	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.273411989 CET	53	53342	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.275209904 CET	38727	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.397490978 CET	53	38727	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.398983955 CET	56316	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.521230936 CET	53	56316	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.523165941 CET	43087	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.645509958 CET	53	43087	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.647166967 CET	53195	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.769534111 CET	53	53195	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.771399975 CET	58963	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:11.893740892 CET	53	58963	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:11.895271063 CET	56998	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:12.017616034 CET	53	56998	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:13.405086994 CET	51939	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:13.527416945 CET	53	51939	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:13.528877020 CET	39243	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:13.651252031 CET	53	39243	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:13.652586937 CET	41773	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:13.774982929 CET	53	41773	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:13.776379108 CET	56843	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:13.898720026 CET	53	56843	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:13.899647951 CET	59062	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.022929907 CET	53	59062	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:14.023943901 CET	59755	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.146238089 CET	53	59755	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:14.147532940 CET	41768	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.269915104 CET	53	41768	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:14.271450043 CET	35482	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.393750906 CET	53	35482	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:14.395503998 CET	42038	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.517882109 CET	53	42038	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:14.519253969 CET	50597	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:14.641666889 CET	53	50597	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.028846979 CET	57900	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.151114941 CET	53	57900	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.152165890 CET	40979	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.274449110 CET	53	40979	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.275962114 CET	39165	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.398183107 CET	53	39165	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.399581909 CET	51978	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.521855116 CET	53	51978	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.523329973 CET	41081	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.645781994 CET	53	41081	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.647053003 CET	55127	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.769272089 CET	53	55127	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.770833015 CET	44751	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:16.893124104 CET	53	44751	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:16.894697905 CET	54946	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:17.016931057 CET	53	54946	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:17.018399000 CET	45961	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:17.140851021 CET	53	45961	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:17.142230988 CET	52724	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:17.264543056 CET	53	52724	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:35.994983912 CET	45158	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.119703054 CET	53	45158	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.120682001 CET	39070	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.243211031 CET	53	39070	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.243992090 CET	36684	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.366286039 CET	53	36684	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.367681980 CET	42113	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.490194082 CET	53	42113	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.491537094 CET	57350	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.613874912 CET	53	57350	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.615103960 CET	51391	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.737338066 CET	53	51391	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.738550901 CET	36496	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.861814976 CET	53	36496	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.863492012 CET	56979	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:36.985811949 CET	53	56979	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:36.987193108 CET	41414	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:37.109724998 CET	53	41414	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:37.110950947 CET	54654	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:37.233189106 CET	53	54654	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:38.619612932 CET	35819	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:38.741827011 CET	53	35819	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:38.743139982 CET	59333	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:38.865570068 CET	53	59333	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:38.866702080 CET	60840	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:38.988962889 CET	53	60840	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:38.990484953 CET	52525	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.112950087 CET	53	52525	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.114281893 CET	36044	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.236547947 CET	53	36044	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.237910032 CET	48809	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.360299110 CET	53	48809	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.361748934 CET	37328	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.484092951 CET	53	37328	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.485661030 CET	42280	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.608041048 CET	53	42280	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.609487057 CET	41600	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.731975079 CET	53	41600	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:39.733510017 CET	46318	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:39.855914116 CET	53	46318	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.242898941 CET	55835	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.365120888 CET	53	55835	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.366795063 CET	58463	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.489290953 CET	53	58463	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.490912914 CET	41525	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.613548994 CET	53	41525	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.615267038 CET	59848	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.737788916 CET	53	59848	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.739375114 CET	41943	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.861913919 CET	53	41943	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.864120960 CET	36555	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:41.986347914 CET	53	36555	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:41.988360882 CET	56340	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:42.110769033 CET	53	56340	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:42.112643957 CET	43661	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:42.234997034 CET	53	43661	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:42.236917019 CET	57120	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:42.359311104 CET	53	57120	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:42.361289978 CET	50829	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:42.483500004 CET	53	50829	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:43.871973038 CET	37392	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:43.994230032 CET	53	37392	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:43.995793104 CET	39033	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.118452072 CET	53	39033	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.120383024 CET	47588	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.242839098 CET	53	47588	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.244806051 CET	57318	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.367197037 CET	53	57318	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.369362116 CET	34553	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.493171930 CET	53	34553	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.495182037 CET	38593	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.617527962 CET	53	38593	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.619112968 CET	45349	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.742002964 CET	53	45349	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.743820906 CET	58079	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.866147995 CET	53	58079	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.867868900 CET	48656	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:44.990240097 CET	53	48656	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:44.992188931 CET	50233	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:45.114777088 CET	53	50233	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:46.502325058 CET	47186	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:46.624773979 CET	53	47186	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:46.627037048 CET	40161	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:46.749485016 CET	53	40161	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:46.751651049 CET	54541	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:46.874116898 CET	53	54541	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:46.876106024 CET	53837	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:46.998629093 CET	53	53837	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.000617027 CET	36027	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.123105049 CET	53	36027	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.127188921 CET	59643	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.249541998 CET	53	59643	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.251924992 CET	57676	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.374226093 CET	53	57676	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.376487970 CET	55117	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.498878002 CET	53	55117	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.500742912 CET	34301	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.623131037 CET	53	34301	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:47.625256062 CET	50274	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:47.747699022 CET	53	50274	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:49.134924889 CET	51761	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:49.257255077 CET	53	51761	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:49.258924961 CET	53891	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:49.836858034 CET	53	53891	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:49.838859081 CET	57307	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:49.961170912 CET	53	57307	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:49.963138103 CET	54651	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.085779905 CET	53	54651	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.087773085 CET	33702	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.210117102 CET	53	33702	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.212268114 CET	57428	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.334727049 CET	53	57428	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.336833000 CET	60534	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.459197998 CET	53	60534	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.461039066 CET	36605	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.583344936 CET	53	36605	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.585189104 CET	32985	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.707480907 CET	53	32985	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:50.709481955 CET	56836	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:50.832062006 CET	53	56836	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.220920086 CET	54807	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.343152046 CET	53	54807	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.345051050 CET	49334	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.467339993 CET	53	49334	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.469043970 CET	58265	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.591272116 CET	53	58265	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.593338966 CET	60292	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.715591908 CET	53	60292	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.717324018 CET	58469	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.840282917 CET	53	58469	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.842128992 CET	54971	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:52.964395046 CET	53	54971	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:52.966381073 CET	52692	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:53.088644028 CET	53	52692	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:53.090550900 CET	57141	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:53.212778091 CET	53	57141	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:53.214848995 CET	52393	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:53.338417053 CET	53	52393	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:53.340312004 CET	47992	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:53.464111090 CET	53	47992	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:54.853879929 CET	38184	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:54.976116896 CET	53	38184	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:54.977813959 CET	57827	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.100327015 CET	53	57827	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.102190971 CET	51572	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.224473000 CET	53	51572	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.226737976 CET	42960	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.348944902 CET	53	42960	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.350719929 CET	37445	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.473110914 CET	53	37445	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.474920034 CET	39905	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.597306013 CET	53	39905	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.598613977 CET	34989	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.720829964 CET	53	34989	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.722623110 CET	51199	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.845274925 CET	53	51199	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.847407103 CET	49261	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:55.969806910 CET	53	49261	8.8.8.8	192.168.2.23
Dec 26, 2024 06:04:55.971652985 CET	34724	53	192.168.2.23	8.8.8.8
Dec 26, 2024 06:04:56.094162941 CET	53	34724	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 26, 2024 06:02:52.398744106 CET	192.168.2.23	8.8.8.8	0xa202	Standard query (0)	raw.cardiacpure.ru	A (IP address)	IN (0x0001)	false
Dec 26, 2024 06:02:52.638252974 CET	192.168.2.23	8.8.8.8	0x5c69	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	380	false
Dec 26, 2024 06:02:52.761915922 CET	192.168.2.23	8.8.8.8	0x5c69	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	380	false
Dec 26, 2024 06:02:52.885647058 CET	192.168.2.23	8.8.8.8	0x5c69	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 26, 2024 06:02:53.009232044 CET	192.168.2.23	8.8.8.8	0x5c69	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 26, 2024 06:02:53.133479118 CET	192.168.2.23	8.8.8.8	0x5c69	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	381	false
Dec 26, 2024 06:02:55.268630981 CET	192.168.2.23	8.8.8.8	0xbdf6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 26, 2024 06:02:55.392677069 CET	192.168.2.23	8.8.8.8	0xbdf6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 26, 2024 06:02:55.516774893 CET	192.168.2.23	8.8.8.8	0xbdf6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 26, 2024 06:02:55.640309095 CET	192.168.2.23	8.8.8.8	0xbdf6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 26, 2024 06:02:55.763669014 CET	192.168.2.23	8.8.8.8	0xbdf6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 26, 2024 06:02:57.892997980 CET	192.168.2.23	8.8.8.8	0xc2bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 26, 2024 06:02:58.017230988 CET	192.168.2.23	8.8.8.8	0xc2bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 26, 2024 06:02:58.141530991 CET	192.168.2.23	8.8.8.8	0xc2bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 26, 2024 06:02:58.265074968 CET	192.168.2.23	8.8.8.8	0xc2bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 26, 2024 06:02:58.388067961 CET	192.168.2.23	8.8.8.8	0xc2bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	386	false
Dec 26, 2024 06:03:00.513506889 CET	192.168.2.23	8.8.8.8	0x76dd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 26, 2024 06:03:00.638540030 CET	192.168.2.23	8.8.8.8	0x76dd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 26, 2024 06:03:00.762038946 CET	192.168.2.23	8.8.8.8	0x76dd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 26, 2024 06:03:00.885221958 CET	192.168.2.23	8.8.8.8	0x76dd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 26, 2024 06:03:01.008461952 CET	192.168.2.23	8.8.8.8	0x76dd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	389	false
Dec 26, 2024 06:03:03.134979963 CET	192.168.2.23	8.8.8.8	0xeba9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 26, 2024 06:03:03.258296967 CET	192.168.2.23	8.8.8.8	0xeba9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 26, 2024 06:03:03.383168936 CET	192.168.2.23	8.8.8.8	0xeba9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 26, 2024 06:03:03.506937981 CET	192.168.2.23	8.8.8.8	0xeba9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 26, 2024 06:03:03.629784107 CET	192.168.2.23	8.8.8.8	0xeba9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 26, 2024 06:03:05.759063959 CET	192.168.2.23	8.8.8.8	0x310f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 26, 2024 06:03:05.882261038 CET	192.168.2.23	8.8.8.8	0x310f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 26, 2024 06:03:06.006676912 CET	192.168.2.23	8.8.8.8	0x310f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 26, 2024 06:03:06.130145073 CET	192.168.2.23	8.8.8.8	0x310f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 26, 2024 06:03:06.253129959 CET	192.168.2.23	8.8.8.8	0x310f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	394	false
Dec 26, 2024 06:03:08.377784014 CET	192.168.2.23	8.8.8.8	0x62ac	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 06:03:08.500649929 CET	192.168.2.23	8.8.8.8	0x62ac	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 06:03:08.629919052 CET	192.168.2.23	8.8.8.8	0x62ac	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 06:03:08.753122091 CET	192.168.2.23	8.8.8.8	0x62ac	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 06:03:08.876517057 CET	192.168.2.23	8.8.8.8	0x62ac	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 06:03:11.006073952 CET	192.168.2.23	8.8.8.8	0x7fb1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 06:03:11.129307985 CET	192.168.2.23	8.8.8.8	0x7fb1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 06:03:11.252640963 CET	192.168.2.23	8.8.8.8	0x7fb1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 06:03:11.375701904 CET	192.168.2.23	8.8.8.8	0x7fb1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 06:03:11.498874903 CET	192.168.2.23	8.8.8.8	0x7fb1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 06:03:13.624443054 CET	192.168.2.23	8.8.8.8	0x9666	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	401	false
Dec 26, 2024 06:03:13.747523069 CET	192.168.2.23	8.8.8.8	0x9666	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	401	false
Dec 26, 2024 06:03:13.870771885 CET	192.168.2.23	8.8.8.8	0x9666	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	401	false
Dec 26, 2024 06:03:13.993928909 CET	192.168.2.23	8.8.8.8	0x9666	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 26, 2024 06:03:14.117017984 CET	192.168.2.23	8.8.8.8	0x9666	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 26, 2024 06:03:16.251156092 CET	192.168.2.23	8.8.8.8	0xb04d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 26, 2024 06:03:16.374232054 CET	192.168.2.23	8.8.8.8	0xb04d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 26, 2024 06:03:16.497164011 CET	192.168.2.23	8.8.8.8	0xb04d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 26, 2024 06:03:16.620448112 CET	192.168.2.23	8.8.8.8	0xb04d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 26, 2024 06:03:16.743947983 CET	192.168.2.23	8.8.8.8	0xb04d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	404	false
Dec 26, 2024 06:03:18.871285915 CET	192.168.2.23	8.8.8.8	0x462	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	406	false
Dec 26, 2024 06:03:18.995924950 CET	192.168.2.23	8.8.8.8	0x462	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 26, 2024 06:03:19.119667053 CET	192.168.2.23	8.8.8.8	0x462	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 26, 2024 06:03:19.243449926 CET	192.168.2.23	8.8.8.8	0x462	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 26, 2024 06:03:19.366965055 CET	192.168.2.23	8.8.8.8	0x462	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 26, 2024 06:03:21.496624947 CET	192.168.2.23	8.8.8.8	0xa967	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	409	false
Dec 26, 2024 06:03:21.619890928 CET	192.168.2.23	8.8.8.8	0xa967	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	409	false
Dec 26, 2024 06:03:21.743206978 CET	192.168.2.23	8.8.8.8	0xa967	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	409	false
Dec 26, 2024 06:03:21.866616011 CET	192.168.2.23	8.8.8.8	0xa967	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	409	false
Dec 26, 2024 06:03:21.990297079 CET	192.168.2.23	8.8.8.8	0xa967	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 26, 2024 06:03:24.119270086 CET	192.168.2.23	8.8.8.8	0xa163	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 26, 2024 06:03:24.243184090 CET	192.168.2.23	8.8.8.8	0xa163	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 26, 2024 06:03:24.366967916 CET	192.168.2.23	8.8.8.8	0xa163	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 26, 2024 06:03:24.490714073 CET	192.168.2.23	8.8.8.8	0xa163	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 26, 2024 06:03:24.614670992 CET	192.168.2.23	8.8.8.8	0xa163	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	412	false
Dec 26, 2024 06:03:26.745969057 CET	192.168.2.23	8.8.8.8	0x905	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	414	false
Dec 26, 2024 06:03:26.869777918 CET	192.168.2.23	8.8.8.8	0x905	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	414	false
Dec 26, 2024 06:03:26.993928909 CET	192.168.2.23	8.8.8.8	0x905	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 26, 2024 06:03:27.117852926 CET	192.168.2.23	8.8.8.8	0x905	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 26, 2024 06:03:27.241949081 CET	192.168.2.23	8.8.8.8	0x905	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 26, 2024 06:03:29.370162964 CET	192.168.2.23	8.8.8.8	0x7422	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	417	false
Dec 26, 2024 06:03:29.494074106 CET	192.168.2.23	8.8.8.8	0x7422	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	417	false
Dec 26, 2024 06:03:29.618005037 CET	192.168.2.23	8.8.8.8	0x7422	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	417	false
Dec 26, 2024 06:03:29.742010117 CET	192.168.2.23	8.8.8.8	0x7422	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	417	false
Dec 26, 2024 06:03:29.866177082 CET	192.168.2.23	8.8.8.8	0x7422	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	417	false
Dec 26, 2024 06:03:31.995392084 CET	192.168.2.23	8.8.8.8	0x23e6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 26, 2024 06:03:32.120068073 CET	192.168.2.23	8.8.8.8	0x23e6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 26, 2024 06:03:32.244040012 CET	192.168.2.23	8.8.8.8	0x23e6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 26, 2024 06:03:32.369400978 CET	192.168.2.23	8.8.8.8	0x23e6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 26, 2024 06:03:32.492973089 CET	192.168.2.23	8.8.8.8	0x23e6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	420	false
Dec 26, 2024 06:03:34.620603085 CET	192.168.2.23	8.8.8.8	0x4e04	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	422	false
Dec 26, 2024 06:03:34.744343042 CET	192.168.2.23	8.8.8.8	0x4e04	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	422	false
Dec 26, 2024 06:03:34.868091106 CET	192.168.2.23	8.8.8.8	0x4e04	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	422	false
Dec 26, 2024 06:03:34.991524935 CET	192.168.2.23	8.8.8.8	0x4e04	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 26, 2024 06:03:35.114828110 CET	192.168.2.23	8.8.8.8	0x4e04	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	423	false
Dec 26, 2024 06:03:37.241334915 CET	192.168.2.23	8.8.8.8	0x61e9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 26, 2024 06:03:37.364469051 CET	192.168.2.23	8.8.8.8	0x61e9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 26, 2024 06:03:37.488149881 CET	192.168.2.23	8.8.8.8	0x61e9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 26, 2024 06:03:37.611763954 CET	192.168.2.23	8.8.8.8	0x61e9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 26, 2024 06:03:37.735057116 CET	192.168.2.23	8.8.8.8	0x61e9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	425	false
Dec 26, 2024 06:03:39.862086058 CET	192.168.2.23	8.8.8.8	0x6ad4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	427	false
Dec 26, 2024 06:03:39.986002922 CET	192.168.2.23	8.8.8.8	0x6ad4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 26, 2024 06:03:40.109652042 CET	192.168.2.23	8.8.8.8	0x6ad4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 26, 2024 06:03:40.232795954 CET	192.168.2.23	8.8.8.8	0x6ad4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 26, 2024 06:03:40.356359005 CET	192.168.2.23	8.8.8.8	0x6ad4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	428	false
Dec 26, 2024 06:03:42.485972881 CET	192.168.2.23	8.8.8.8	0xdf2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	430	false
Dec 26, 2024 06:03:42.609878063 CET	192.168.2.23	8.8.8.8	0xdf2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	430	false
Dec 26, 2024 06:03:42.733356953 CET	192.168.2.23	8.8.8.8	0xdf2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	430	false
Dec 26, 2024 06:03:42.857347012 CET	192.168.2.23	8.8.8.8	0xdf2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	430	false
Dec 26, 2024 06:03:42.980848074 CET	192.168.2.23	8.8.8.8	0xdf2b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 26, 2024 06:03:45.114419937 CET	192.168.2.23	8.8.8.8	0x4fa1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 26, 2024 06:03:45.238384008 CET	192.168.2.23	8.8.8.8	0x4fa1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 26, 2024 06:03:45.362004995 CET	192.168.2.23	8.8.8.8	0x4fa1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 26, 2024 06:03:45.485462904 CET	192.168.2.23	8.8.8.8	0x4fa1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 26, 2024 06:03:45.609196901 CET	192.168.2.23	8.8.8.8	0x4fa1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 26, 2024 06:03:47.764575958 CET	192.168.2.23	8.8.8.8	0x25be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	435	false
Dec 26, 2024 06:03:47.888623953 CET	192.168.2.23	8.8.8.8	0x25be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 26, 2024 06:03:48.012650013 CET	192.168.2.23	8.8.8.8	0x25be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 26, 2024 06:03:48.136611938 CET	192.168.2.23	8.8.8.8	0x25be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 26, 2024 06:03:48.260909081 CET	192.168.2.23	8.8.8.8	0x25be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 26, 2024 06:03:50.390445948 CET	192.168.2.23	8.8.8.8	0xc6ee	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	438	false
Dec 26, 2024 06:03:50.514442921 CET	192.168.2.23	8.8.8.8	0xc6ee	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	438	false
Dec 26, 2024 06:03:50.638273954 CET	192.168.2.23	8.8.8.8	0xc6ee	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	438	false
Dec 26, 2024 06:03:50.762600899 CET	192.168.2.23	8.8.8.8	0xc6ee	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	438	false
Dec 26, 2024 06:03:50.887104988 CET	192.168.2.23	8.8.8.8	0xc6ee	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	439	false
Dec 26, 2024 06:03:53.016829014 CET	192.168.2.23	8.8.8.8	0x47be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 26, 2024 06:03:53.140592098 CET	192.168.2.23	8.8.8.8	0x47be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 26, 2024 06:03:53.264555931 CET	192.168.2.23	8.8.8.8	0x47be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 26, 2024 06:03:53.389565945 CET	192.168.2.23	8.8.8.8	0x47be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 26, 2024 06:03:53.513423920 CET	192.168.2.23	8.8.8.8	0x47be	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	441	false
Dec 26, 2024 06:03:55.645885944 CET	192.168.2.23	8.8.8.8	0x5019	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	443	false
Dec 26, 2024 06:03:55.769908905 CET	192.168.2.23	8.8.8.8	0x5019	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	443	false
Dec 26, 2024 06:03:55.893999100 CET	192.168.2.23	8.8.8.8	0x5019	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 26, 2024 06:03:56.018402100 CET	192.168.2.23	8.8.8.8	0x5019	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 26, 2024 06:03:56.142028093 CET	192.168.2.23	8.8.8.8	0x5019	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	444	false
Dec 26, 2024 06:03:58.278986931 CET	192.168.2.23	8.8.8.8	0x42de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 26, 2024 06:03:58.402168989 CET	192.168.2.23	8.8.8.8	0x42de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 26, 2024 06:03:58.526113987 CET	192.168.2.23	8.8.8.8	0x42de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 26, 2024 06:03:58.651304007 CET	192.168.2.23	8.8.8.8	0x42de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 26, 2024 06:03:58.774409056 CET	192.168.2.23	8.8.8.8	0x42de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	446	false
Dec 26, 2024 06:04:00.900161028 CET	192.168.2.23	8.8.8.8	0x2328	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 26, 2024 06:04:01.023682117 CET	192.168.2.23	8.8.8.8	0x2328	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 26, 2024 06:04:01.146944046 CET	192.168.2.23	8.8.8.8	0x2328	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 26, 2024 06:04:01.270029068 CET	192.168.2.23	8.8.8.8	0x2328	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 26, 2024 06:04:01.393369913 CET	192.168.2.23	8.8.8.8	0x2328	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	449	false
Dec 26, 2024 06:04:03.522161007 CET	192.168.2.23	8.8.8.8	0x7b4b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	451	false
Dec 26, 2024 06:04:03.645728111 CET	192.168.2.23	8.8.8.8	0x7b4b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	451	false
Dec 26, 2024 06:04:03.769598007 CET	192.168.2.23	8.8.8.8	0x7b4b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	451	false
Dec 26, 2024 06:04:03.893121004 CET	192.168.2.23	8.8.8.8	0x7b4b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 26, 2024 06:04:04.016913891 CET	192.168.2.23	8.8.8.8	0x7b4b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	452	false
Dec 26, 2024 06:04:06.148324966 CET	192.168.2.23	8.8.8.8	0x6d31	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 26, 2024 06:04:06.272038937 CET	192.168.2.23	8.8.8.8	0x6d31	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 26, 2024 06:04:06.395181894 CET	192.168.2.23	8.8.8.8	0x6d31	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 26, 2024 06:04:06.518477917 CET	192.168.2.23	8.8.8.8	0x6d31	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 26, 2024 06:04:06.641597986 CET	192.168.2.23	8.8.8.8	0x6d31	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	454	false
Dec 26, 2024 06:04:08.772042036 CET	192.168.2.23	8.8.8.8	0xf782	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	456	false
Dec 26, 2024 06:04:08.895324945 CET	192.168.2.23	8.8.8.8	0xf782	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 26, 2024 06:04:09.019582033 CET	192.168.2.23	8.8.8.8	0xf782	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 26, 2024 06:04:09.143564939 CET	192.168.2.23	8.8.8.8	0xf782	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 26, 2024 06:04:09.267505884 CET	192.168.2.23	8.8.8.8	0xf782	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	457	false
Dec 26, 2024 06:04:11.398983955 CET	192.168.2.23	8.8.8.8	0x6544	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	459	false
Dec 26, 2024 06:04:11.523165941 CET	192.168.2.23	8.8.8.8	0x6544	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	459	false
Dec 26, 2024 06:04:11.647166967 CET	192.168.2.23	8.8.8.8	0x6544	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	459	false
Dec 26, 2024 06:04:11.771399975 CET	192.168.2.23	8.8.8.8	0x6544	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	459	false
Dec 26, 2024 06:04:11.895271063 CET	192.168.2.23	8.8.8.8	0x6544	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	460	false
Dec 26, 2024 06:04:14.023943901 CET	192.168.2.23	8.8.8.8	0x986f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 26, 2024 06:04:14.147532940 CET	192.168.2.23	8.8.8.8	0x986f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 26, 2024 06:04:14.271450043 CET	192.168.2.23	8.8.8.8	0x986f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 26, 2024 06:04:14.395503998 CET	192.168.2.23	8.8.8.8	0x986f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 26, 2024 06:04:14.519253969 CET	192.168.2.23	8.8.8.8	0x986f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	462	false
Dec 26, 2024 06:04:16.647053003 CET	192.168.2.23	8.8.8.8	0xdccf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	464	false
Dec 26, 2024 06:04:16.770833015 CET	192.168.2.23	8.8.8.8	0xdccf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	464	false
Dec 26, 2024 06:04:16.894697905 CET	192.168.2.23	8.8.8.8	0xdccf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	465	false
Dec 26, 2024 06:04:17.018399000 CET	192.168.2.23	8.8.8.8	0xdccf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	465	false
Dec 26, 2024 06:04:17.142230988 CET	192.168.2.23	8.8.8.8	0xdccf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	465	false
Dec 26, 2024 06:04:36.615103960 CET	192.168.2.23	8.8.8.8	0xa48c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	484	false
Dec 26, 2024 06:04:36.738550901 CET	192.168.2.23	8.8.8.8	0xa48c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	484	false
Dec 26, 2024 06:04:36.863492012 CET	192.168.2.23	8.8.8.8	0xa48c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	484	false
Dec 26, 2024 06:04:36.987193108 CET	192.168.2.23	8.8.8.8	0xa48c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	485	false
Dec 26, 2024 06:04:37.110950947 CET	192.168.2.23	8.8.8.8	0xa48c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	485	false
Dec 26, 2024 06:04:39.237910032 CET	192.168.2.23	8.8.8.8	0xe9a9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	487	false
Dec 26, 2024 06:04:39.361748934 CET	192.168.2.23	8.8.8.8	0xe9a9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	487	false
Dec 26, 2024 06:04:39.485661030 CET	192.168.2.23	8.8.8.8	0xe9a9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	487	false
Dec 26, 2024 06:04:39.609487057 CET	192.168.2.23	8.8.8.8	0xe9a9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	487	false
Dec 26, 2024 06:04:39.733510017 CET	192.168.2.23	8.8.8.8	0xe9a9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	487	false
Dec 26, 2024 06:04:41.864120960 CET	192.168.2.23	8.8.8.8	0x9db5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	489	false
Dec 26, 2024 06:04:41.988360882 CET	192.168.2.23	8.8.8.8	0x9db5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	490	false
Dec 26, 2024 06:04:42.112643957 CET	192.168.2.23	8.8.8.8	0x9db5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	490	false
Dec 26, 2024 06:04:42.236917019 CET	192.168.2.23	8.8.8.8	0x9db5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	490	false
Dec 26, 2024 06:04:42.361289978 CET	192.168.2.23	8.8.8.8	0x9db5	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	490	false
Dec 26, 2024 06:04:44.495182037 CET	192.168.2.23	8.8.8.8	0x903c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	492	false
Dec 26, 2024 06:04:44.619112968 CET	192.168.2.23	8.8.8.8	0x903c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	492	false
Dec 26, 2024 06:04:44.743820906 CET	192.168.2.23	8.8.8.8	0x903c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	492	false
Dec 26, 2024 06:04:44.867868900 CET	192.168.2.23	8.8.8.8	0x903c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	492	false
Dec 26, 2024 06:04:44.992188931 CET	192.168.2.23	8.8.8.8	0x903c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	493	false
Dec 26, 2024 06:04:47.127188921 CET	192.168.2.23	8.8.8.8	0x42eb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	495	false
Dec 26, 2024 06:04:47.251924992 CET	192.168.2.23	8.8.8.8	0x42eb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	495	false
Dec 26, 2024 06:04:47.376487970 CET	192.168.2.23	8.8.8.8	0x42eb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	495	false
Dec 26, 2024 06:04:47.500742912 CET	192.168.2.23	8.8.8.8	0x42eb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	495	false
Dec 26, 2024 06:04:47.625256062 CET	192.168.2.23	8.8.8.8	0x42eb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	495	false
Dec 26, 2024 06:04:50.212268114 CET	192.168.2.23	8.8.8.8	0x8896	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	498	false
Dec 26, 2024 06:04:50.336833000 CET	192.168.2.23	8.8.8.8	0x8896	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	498	false
Dec 26, 2024 06:04:50.461039066 CET	192.168.2.23	8.8.8.8	0x8896	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	498	false
Dec 26, 2024 06:04:50.585189104 CET	192.168.2.23	8.8.8.8	0x8896	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	498	false
Dec 26, 2024 06:04:50.709481955 CET	192.168.2.23	8.8.8.8	0x8896	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	498	false
Dec 26, 2024 06:04:52.842128992 CET	192.168.2.23	8.8.8.8	0x41c8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	500	false
Dec 26, 2024 06:04:52.966381073 CET	192.168.2.23	8.8.8.8	0x41c8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	501	false
Dec 26, 2024 06:04:53.090550900 CET	192.168.2.23	8.8.8.8	0x41c8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	501	false
Dec 26, 2024 06:04:53.214848995 CET	192.168.2.23	8.8.8.8	0x41c8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	501	false
Dec 26, 2024 06:04:53.340312004 CET	192.168.2.23	8.8.8.8	0x41c8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	501	false
Dec 26, 2024 06:04:55.474920034 CET	192.168.2.23	8.8.8.8	0x847f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 26, 2024 06:04:55.598613977 CET	192.168.2.23	8.8.8.8	0x847f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 26, 2024 06:04:55.722623110 CET	192.168.2.23	8.8.8.8	0x847f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 26, 2024 06:04:55.847407103 CET	192.168.2.23	8.8.8.8	0x847f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 26, 2024 06:04:55.971652985 CET	192.168.2.23	8.8.8.8	0x847f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	504	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 26, 2024 06:02:52.636353970 CET	8.8.8.8	192.168.2.23	0xa202	No error (0)	raw.cardiacpure.ru		178.215.238.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: ngwa5.elf PID: 6235, Parent PID: 6160

General

Start time (UTC):	05:02:51
Start date (UTC):	26/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	/tmp/ngwa5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: ngwa5.elf PID: 6237, Parent PID: 6235

General

Start time (UTC):	05:02:51
Start date (UTC):	26/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: ngwa5.elf PID: 6239, Parent PID: 6237

General

Start time (UTC):	05:02:51
Start date (UTC):	26/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ngwa5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.yCQjtD (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: ngwa5.elf PID: 6235, Parent PID: 6160

General

Chronological Activities

Analysis Process: ngwa5.elf PID: 6237, Parent PID: 6235

General

Chronological Activities

Analysis Process: ngwa5.elf PID: 6239, Parent PID: 6237

General

Chronological Activities

Linux Analysis Report
ngwa5.elf