Edit tour

Linux Analysis Report
Aqua.m68k.elf

Overview

General Information

Sample name:	Aqua.m68k.elf
Analysis ID:	1581776
MD5:	7feddd6f06496461a5cb368315554fbe
SHA1:	ea164d9cf0af5537dc044181fec2e84bb9b88f60
SHA256:	8f50c517fda653439e48e7155b8eaf42912425a86c3ecac1b6ef621bc756cf04
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Sample deletes itself

Sends malformed DNS queries

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581776
Start date and time:	2024-12-28 23:56:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.m68k.elf
Detection:	MAL
Classification:	mal56.troj.evad.linELF@0/1@141/0

Warnings

VT rate limit hit for: Aqua.m68k.elf

Runtime Messages

Command:	/tmp/Aqua.m68k.elf
PID:	6247
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.m68k.elf (PID: 6247, Parent: 6163, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/Aqua.m68k.elf

Aqua.m68k.elf New Fork (PID: 6250, Parent: 6247)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Aqua.m68k.elf

ReversingLabs: Detection: 16%

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.intenseapi.com. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:40832 -> 193.200.78.37:33966

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43

Source: global traffic	DNS traffic detected: DNS query: raw.intenseapi.com
Source: global traffic	DNS traffic detected: DNS query: raw.intenseapi.com. [malformed]

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.troj.evad.linELF@0/1@141/0

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.m68k.elf (PID: 6250)

File: /tmp/Aqua.m68k.elf

Jump to behavior

Source: /tmp/Aqua.m68k.elf (PID: 6247)

Queries kernel information via 'uname':

Jump to behavior

Source: Aqua.m68k.elf, 6247.1.00007ffe7b7c1000.00007ffe7b7e2000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.wZTbeA
Source: Aqua.m68k.elf, 6247.1.00007ffe7b7c1000.00007ffe7b7e2000.rw-.sdmp	Binary or memory string: /qemu-open.XXXXX
Source: Aqua.m68k.elf, 6247.1.00005580647d3000.0000558064858000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: Aqua.m68k.elf, 6247.1.00007ffe7b7c1000.00007ffe7b7e2000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: Aqua.m68k.elf, 6247.1.00007ffe7b7c1000.00007ffe7b7e2000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/Aqua.m68k.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Aqua.m68k.elf
Source: Aqua.m68k.elf, 6247.1.00007ffe7b7c1000.00007ffe7b7e2000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.wZTbeA\
Source: Aqua.m68k.elf, 6247.1.00005580647d3000.0000558064858000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.m68k.elf	16%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.intenseapi.com	193.200.78.37	true	false		high
raw.intenseapi.com. [malformed]	unknown	unknown	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.200.78.37	raw.intenseapi.com	Switzerland	29496	LINK-SERVICE-ASUA	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
193.200.78.37	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	mips.elf	Get hash	malicious	Unknown	Browse
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse
	109.71.252.43-boatnet.arm6-2024-12-28T20_30_37.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	mips.elf	Get hash	malicious	Unknown	Browse
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse
	109.71.252.43-boatnet.arm6-2024-12-28T20_30_37.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.intenseapi.com	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	185.125.190.26
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	kqibeps.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ngwa5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	185.125.190.26
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	kqibeps.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ngwa5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
INIT7CH	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	kqibeps.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ngwa5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	109.71.252.43-boatnet.arm6-2024-12-28T20_30_37.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	fnkea7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
LINK-SERVICE-ASUA	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	KCmfLMBjHJ.elf	Get hash	malicious	Unknown	Browse	193.200.79.115
	assailant.i586	Get hash	malicious	Mirai	Browse	194.146.110.216
	9CSfviwl3l	Get hash	malicious	Mirai	Browse	193.200.79.137
	h5OUwxH9E5	Get hash	malicious	Mirai	Browse	193.200.79.128

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.wZTbeA (deleted)

Download File

Process:	/tmp/Aqua.m68k.elf
File Type:	data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.254195650150781
Encrypted:	false
SSDEEP:	3:Tg9s+HJN:Tg9FJN
MD5:	F3F397AFAB5A2FAFD3ED15D9AC539FA5
SHA1:	00B3C1035E9A9C328B0F37AD2E20410918634831
SHA-256:	813A791800A8D59AC86723939917FF66B9D438D4A6BB7C81203E842AFF6C6FD8
SHA-512:	B241A66C747803C1B652C0B3613148CAB9E743389B5EB8E139EA3D2496A3BF7E375BD5F89CFCD5D20FA0CDCB47A6BDE4C42BEEAD18C89F5063CE0D277EDB9428
Malicious:	false
Reputation:	low
Preview:	/tmp/Aqua.m68k.elf.nwlrbbmqbh

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.214639711460908
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.m68k.elf
File size:	56'296 bytes
MD5:	7feddd6f06496461a5cb368315554fbe
SHA1:	ea164d9cf0af5537dc044181fec2e84bb9b88f60
SHA256:	8f50c517fda653439e48e7155b8eaf42912425a86c3ecac1b6ef621bc756cf04
SHA512:	d023c85045972b70e7a196c2c7f0ed69b3c1bdd7c5a51f6aa623b63e10f41be9de4b1bec2752e2ac745db73d17e590c81ca5546aa63a3b6b395b570b196fcc3a
SSDEEP:	768:1UeEpHgQ6hTcjmXNHS7RaI8EDfjVwf/+nUyZIeHjsBB3i0kjIPM:qlpHIcjmXwV8whwf/CUyeeHjsBBSjj
TLSH:	97432BD6F801DD7CF80FD67E5463450AF670A76101830B3A63ABFE936D722A44966E82
File Content Preview:	.ELF.......................D...4...X.....4. ...(.......................f...f...... ........l...l...l......%P...... .dt.Q............................NV..a....da....4N^NuNV..J9....f>"y.... QJ.g.X.#.....N."y.... QJ.f.A.....J.g.Hy...hN.X.........N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	55896
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0xc45e	0x0	0x6	AX	4
.fini	PROGBITS	0x8000c506	0xc506	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x8000c514	0xc514	0x1152	0x0	0x2	A	2
.ctors	PROGBITS	0x8000f66c	0xd66c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8000f674	0xd674	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8000f680	0xd680	0x398	0x0	0x3	WA	4
.bss	NOBITS	0x8000fa18	0xda18	0x21a4	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0xda18	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0xd666	0xd666	6.2558	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0xd66c	0x8000f66c	0x8000f66c	0x3ac	0x2550	3.2921	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 28, 2024 23:57:00.802153111 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:00.818847895 CET	43928	443	192.168.2.23	91.189.91.42
Dec 28, 2024 23:57:00.921811104 CET	33966	40832	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:00.921969891 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:00.923240900 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:01.042701006 CET	33966	40832	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:01.042825937 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:01.162318945 CET	33966	40832	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:02.211370945 CET	33966	40832	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:02.211455107 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:02.211627960 CET	40832	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:03.444485903 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:03.563966990 CET	33966	40834	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:03.564037085 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:03.564841986 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:03.684317112 CET	33966	40834	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:03.684361935 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:03.803895950 CET	33966	40834	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:04.848370075 CET	33966	40834	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:04.848645926 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:04.848645926 CET	40834	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:06.080521107 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:06.200041056 CET	33966	40836	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:06.200108051 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:06.200891018 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:06.320352077 CET	33966	40836	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:06.320430040 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:06.440061092 CET	33966	40836	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:06.450092077 CET	42836	443	192.168.2.23	91.189.91.43
Dec 28, 2024 23:57:07.528165102 CET	33966	40836	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:07.528335094 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:07.528335094 CET	40836	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:07.985985041 CET	42516	80	192.168.2.23	109.202.202.202
Dec 28, 2024 23:57:08.761614084 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:08.881028891 CET	33966	40838	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:08.881105900 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:08.881830931 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:09.001338005 CET	33966	40838	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:09.001440048 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:09.121095896 CET	33966	40838	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:10.124334097 CET	33966	40838	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:10.124689102 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:10.124689102 CET	40838	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:11.359376907 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:11.478933096 CET	33966	40840	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:11.479029894 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:11.479809046 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:11.599299908 CET	33966	40840	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:11.599519014 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:11.719057083 CET	33966	40840	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:12.761213064 CET	33966	40840	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:12.761404037 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:12.761404037 CET	40840	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:13.995347023 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:14.115135908 CET	33966	40842	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:14.115379095 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:14.116518021 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:14.236013889 CET	33966	40842	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:14.236274004 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:14.355804920 CET	33966	40842	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:15.404434919 CET	33966	40842	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:15.404731989 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:15.404807091 CET	40842	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:16.641100883 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:16.760884047 CET	33966	40844	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:16.760972977 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:16.762089968 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:16.881551981 CET	33966	40844	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:16.881675005 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:17.001152039 CET	33966	40844	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:18.050266981 CET	33966	40844	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:18.050725937 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:18.050725937 CET	40844	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:19.289484024 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:19.409007072 CET	33966	40846	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:19.409111977 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:19.410484076 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:19.529889107 CET	33966	40846	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:19.530191898 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:19.649661064 CET	33966	40846	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:20.691030979 CET	33966	40846	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:20.691375971 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:20.691440105 CET	40846	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:21.808042049 CET	43928	443	192.168.2.23	91.189.91.42
Dec 28, 2024 23:57:21.930027962 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:22.049571037 CET	33966	40848	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:22.049643993 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:22.050889969 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:22.170327902 CET	33966	40848	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:22.170391083 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:22.289836884 CET	33966	40848	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:23.292676926 CET	33966	40848	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:23.292772055 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:23.292798996 CET	40848	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:24.529361010 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:24.648816109 CET	33966	40850	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:24.649070978 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:24.650403023 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:24.769866943 CET	33966	40850	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:24.770011902 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:24.889466047 CET	33966	40850	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:25.938457012 CET	33966	40850	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:25.938885927 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:25.938885927 CET	40850	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:27.172614098 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:27.292143106 CET	33966	40852	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:27.292304039 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:27.292998075 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:27.663254023 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:28.047280073 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:28.147141933 CET	33966	40852	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:28.147166967 CET	33966	40852	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:28.267146111 CET	33966	40852	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:29.273315907 CET	33966	40852	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:29.273580074 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:29.273580074 CET	40852	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:30.507424116 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:30.627042055 CET	33966	40854	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:30.627250910 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:30.628398895 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:30.990721941 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:31.231040955 CET	33966	40854	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:31.231079102 CET	33966	40854	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:32.046511889 CET	42836	443	192.168.2.23	91.189.91.43
Dec 28, 2024 23:57:32.417860031 CET	33966	40854	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:32.417974949 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:32.418051004 CET	40854	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:33.652789116 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:33.772325039 CET	33966	40856	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:33.772413969 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:33.773514986 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:33.892960072 CET	33966	40856	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:33.893038034 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:34.012523890 CET	33966	40856	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:35.007122993 CET	33966	40856	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:35.007344961 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:35.007344961 CET	40856	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:36.245942116 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:36.365547895 CET	33966	40858	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:36.365737915 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:36.366911888 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:36.486331940 CET	33966	40858	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:36.486464977 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:36.605987072 CET	33966	40858	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:37.663877010 CET	33966	40858	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:37.664105892 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:37.664105892 CET	40858	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:38.189769983 CET	42516	80	192.168.2.23	109.202.202.202
Dec 28, 2024 23:57:38.905287981 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:39.024810076 CET	33966	40860	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:39.025182962 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:39.026680946 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:39.146153927 CET	33966	40860	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:39.146382093 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:39.265902996 CET	33966	40860	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:40.306442022 CET	33966	40860	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:40.306771040 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:40.306771040 CET	40860	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:41.540364981 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:41.659858942 CET	33966	40862	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:41.660029888 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:41.660959005 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:41.780381918 CET	33966	40862	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:41.780438900 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:41.899918079 CET	33966	40862	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:42.913765907 CET	33966	40862	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:42.913991928 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:42.914019108 CET	40862	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:44.148269892 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:44.267823935 CET	33966	40864	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:44.267961025 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:44.268615961 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:44.388077021 CET	33966	40864	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:44.388156891 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:44.507617950 CET	33966	40864	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:45.557048082 CET	33966	40864	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:45.557262897 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:45.557262897 CET	40864	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:46.790421009 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:46.909941912 CET	33966	40866	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:46.910015106 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:46.910765886 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:47.030322075 CET	33966	40866	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:47.030479908 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:47.151149035 CET	33966	40866	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:48.193882942 CET	33966	40866	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:48.194047928 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:48.194078922 CET	40866	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:49.427787066 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:49.547449112 CET	33966	40868	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:49.547570944 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:49.548372984 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:49.667807102 CET	33966	40868	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:49.668126106 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:49.787708044 CET	33966	40868	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:50.829731941 CET	33966	40868	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:50.829965115 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:50.829965115 CET	40868	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:52.062689066 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:52.182226896 CET	33966	40870	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:52.182476997 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:52.183151960 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:52.302603960 CET	33966	40870	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:52.302819967 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:52.422339916 CET	33966	40870	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:53.519032001 CET	33966	40870	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:53.519124985 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:53.519159079 CET	40870	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:54.752496958 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:54.872061014 CET	33966	40872	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:54.872137070 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:54.872946978 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:54.992384911 CET	33966	40872	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:54.992475033 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:55.112081051 CET	33966	40872	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:56.165092945 CET	33966	40872	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:56.165370941 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:56.165395021 CET	40872	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:57.398821115 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:57.518337011 CET	33966	40874	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:57.518429041 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:57.519351959 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:57.638797045 CET	33966	40874	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:57.638963938 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:57.758445978 CET	33966	40874	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:58.824917078 CET	33966	40874	193.200.78.37	192.168.2.23
Dec 28, 2024 23:57:58.825093985 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:57:58.825129986 CET	40874	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:00.062700033 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:00.182223082 CET	33966	40876	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:00.182336092 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:00.183126926 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:00.302553892 CET	33966	40876	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:00.302670956 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:00.422127008 CET	33966	40876	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:01.424915075 CET	33966	40876	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:01.425067902 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:01.425137997 CET	40876	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:02.662630081 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:02.762303114 CET	43928	443	192.168.2.23	91.189.91.42
Dec 28, 2024 23:58:02.782172918 CET	33966	40878	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:02.782486916 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:02.783865929 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:02.903342009 CET	33966	40878	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:02.903645992 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:03.023147106 CET	33966	40878	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:04.117783070 CET	33966	40878	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:04.117985010 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:04.117985010 CET	40878	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:05.357997894 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:05.477510929 CET	33966	40880	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:05.477860928 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:05.479289055 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:05.598756075 CET	33966	40880	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:05.598993063 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:05.718611002 CET	33966	40880	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:06.720437050 CET	33966	40880	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:06.720635891 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:06.720637083 CET	40880	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:07.958591938 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:08.078126907 CET	33966	40882	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:08.078243017 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:08.079633951 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:08.199100971 CET	33966	40882	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:08.199239016 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:08.318950891 CET	33966	40882	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:09.369019985 CET	33966	40882	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:09.369240999 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:09.369313955 CET	40882	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:10.604646921 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:10.724298954 CET	33966	40884	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:10.724365950 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:10.725004911 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:10.844466925 CET	33966	40884	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:10.844547033 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:10.963934898 CET	33966	40884	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:12.006166935 CET	33966	40884	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:12.006278038 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:12.006329060 CET	40884	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:13.240439892 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:13.359976053 CET	33966	40886	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:13.360073090 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:13.361248970 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:13.480751038 CET	33966	40886	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:13.480815887 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:13.600332022 CET	33966	40886	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:14.611887932 CET	33966	40886	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:14.611998081 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:14.612061024 CET	40886	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:15.852025986 CET	40888	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:15.971487045 CET	33966	40888	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:15.971769094 CET	40888	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:15.973423958 CET	40888	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:16.092804909 CET	33966	40888	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:16.093012094 CET	40888	33966	192.168.2.23	193.200.78.37
Dec 28, 2024 23:58:16.215003967 CET	33966	40888	193.200.78.37	192.168.2.23
Dec 28, 2024 23:58:23.239479065 CET	42836	443	192.168.2.23	91.189.91.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 28, 2024 23:57:00.051124096 CET	38466	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.185025930 CET	53	38466	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:00.186167955 CET	36700	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.308351040 CET	53	36700	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:00.309293032 CET	48165	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.431442022 CET	53	48165	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:00.432342052 CET	48441	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.554675102 CET	53	48441	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:00.555675983 CET	58103	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.677855968 CET	53	58103	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:00.678901911 CET	37247	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:00.801316977 CET	53	37247	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.213007927 CET	49146	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.335225105 CET	53	49146	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.336050034 CET	60394	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.458338976 CET	53	60394	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.459434032 CET	58774	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.581660032 CET	53	58774	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.582562923 CET	46267	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.704864979 CET	53	46267	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.705657005 CET	50042	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.827949047 CET	53	50042	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.828808069 CET	41588	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:02.951052904 CET	53	41588	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:02.951994896 CET	56464	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:03.074235916 CET	53	56464	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:03.075169086 CET	37425	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:03.197361946 CET	53	37425	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:03.198216915 CET	50922	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:03.320497990 CET	53	50922	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:03.321216106 CET	60552	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:03.444062948 CET	53	60552	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:04.849437952 CET	35595	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:04.971645117 CET	53	35595	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:04.972518921 CET	44044	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.094782114 CET	53	44044	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.095529079 CET	50752	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.217729092 CET	53	50752	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.218661070 CET	58330	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.341026068 CET	53	58330	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.341952085 CET	48941	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.464210987 CET	53	48941	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.465064049 CET	42948	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.587296963 CET	53	42948	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.588279963 CET	52084	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.710525036 CET	53	52084	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.711509943 CET	41883	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.833751917 CET	53	41883	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.834733963 CET	48886	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:05.956975937 CET	53	48886	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:05.957762003 CET	60219	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:06.080095053 CET	53	60219	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:07.529201031 CET	53806	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:07.651371002 CET	53	53806	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:07.652230024 CET	41991	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:07.774506092 CET	53	41991	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:07.775454044 CET	54693	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:07.897669077 CET	53	54693	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:07.898598909 CET	51961	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.020843983 CET	53	51961	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.021585941 CET	33148	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.143971920 CET	53	33148	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.144841909 CET	33268	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.267242908 CET	53	33268	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.268574953 CET	35507	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.391283035 CET	53	35507	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.392010927 CET	47986	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.514413118 CET	53	47986	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.515239000 CET	60090	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.637535095 CET	53	60090	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:08.638870955 CET	49705	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:08.761061907 CET	53	49705	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.125874996 CET	51933	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.248047113 CET	53	51933	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.249705076 CET	55934	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.371915102 CET	53	55934	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.373265028 CET	39448	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.495452881 CET	53	39448	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.496423006 CET	54341	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.618839979 CET	53	54341	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.619692087 CET	34019	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.742054939 CET	53	34019	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.742909908 CET	38802	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.865128040 CET	53	38802	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.866087914 CET	39567	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:10.988589048 CET	53	39567	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:10.989423990 CET	48570	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:11.112229109 CET	53	48570	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:11.113054037 CET	44901	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:11.235414028 CET	53	44901	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:11.236435890 CET	48315	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:11.358717918 CET	53	48315	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:12.762265921 CET	59779	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:12.885327101 CET	53	59779	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:12.886267900 CET	54251	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.008591890 CET	53	54251	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.009596109 CET	38378	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.131964922 CET	53	38378	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.132692099 CET	49464	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.254906893 CET	53	49464	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.255810976 CET	52427	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.378082991 CET	53	52427	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.378917933 CET	48314	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.501210928 CET	53	48314	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.502228022 CET	53857	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.624492884 CET	53	53857	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.625468016 CET	56069	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.747792959 CET	53	56069	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.748891115 CET	40735	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.871124983 CET	53	40735	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:13.872101068 CET	60428	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:13.994434118 CET	53	60428	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:15.406240940 CET	50388	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:15.528536081 CET	53	50388	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:15.530047894 CET	47164	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:15.652368069 CET	53	47164	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:15.653599024 CET	48694	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:15.776000023 CET	53	48694	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:15.777018070 CET	40685	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:15.899379015 CET	53	40685	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:15.900367022 CET	47793	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.023030043 CET	53	47793	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:16.023874998 CET	49753	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.146313906 CET	53	49753	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:16.147289991 CET	60399	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.269655943 CET	53	60399	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:16.270621061 CET	58162	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.392966032 CET	53	58162	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:16.394325972 CET	43629	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.516612053 CET	53	43629	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:16.518044949 CET	38117	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:16.640350103 CET	53	38117	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.052169085 CET	56689	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.174573898 CET	53	56689	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.176153898 CET	35803	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.298414946 CET	53	35803	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.300065041 CET	60935	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.422297955 CET	53	60935	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.423801899 CET	53401	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.546179056 CET	53	53401	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.547863007 CET	34501	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.670198917 CET	53	34501	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.671677113 CET	50534	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.793984890 CET	53	50534	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.795556068 CET	60583	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:18.917881012 CET	53	60583	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:18.919013023 CET	43634	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:19.041414022 CET	53	43634	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:19.042896986 CET	40612	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:19.165266991 CET	53	40612	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:19.166205883 CET	48320	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:19.288559914 CET	53	48320	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:20.692878962 CET	51149	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:20.815061092 CET	53	51149	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:20.816318035 CET	34860	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:20.938541889 CET	53	34860	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:20.939866066 CET	44821	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.062046051 CET	53	44821	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.063236952 CET	40435	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.188029051 CET	53	40435	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.189304113 CET	41804	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.311425924 CET	53	41804	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.312268019 CET	50232	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.434653997 CET	53	50232	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.435626030 CET	39193	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.557857037 CET	53	39193	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.559185982 CET	53213	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.681390047 CET	53	53213	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.682549000 CET	55347	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.805960894 CET	53	55347	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:21.806946993 CET	47287	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:21.929228067 CET	53	47287	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.294007063 CET	55157	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:23.416119099 CET	53	55157	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.417370081 CET	51324	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:23.539683104 CET	53	51324	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.540554047 CET	44812	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:23.662790060 CET	53	44812	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.664074898 CET	33789	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:23.786289930 CET	53	33789	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.787491083 CET	47620	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:23.909677029 CET	53	47620	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:23.911123991 CET	45288	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:24.034462929 CET	53	45288	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:24.035284996 CET	53741	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:24.157491922 CET	53	53741	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:24.158909082 CET	44561	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:24.281091928 CET	53	44561	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:24.282469034 CET	60889	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:24.404690981 CET	53	60889	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:24.406248093 CET	47048	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:24.528467894 CET	53	47048	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:25.939989090 CET	37433	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.062145948 CET	53	37433	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.063707113 CET	38633	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.185910940 CET	53	38633	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.187418938 CET	51317	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.309556961 CET	53	51317	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.310506105 CET	42137	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.432727098 CET	53	42137	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.433631897 CET	45942	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.555856943 CET	53	45942	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.556812048 CET	58087	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.679090023 CET	53	58087	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.679970026 CET	42720	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.802196026 CET	53	42720	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.803011894 CET	41260	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:26.925311089 CET	53	41260	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:26.926420927 CET	52321	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:27.048757076 CET	53	52321	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:27.049643040 CET	45159	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:27.171935081 CET	53	45159	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.274981022 CET	46462	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:29.397408009 CET	53	46462	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.398725986 CET	43830	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:29.521198034 CET	53	43830	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.522310972 CET	49176	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:29.644603968 CET	53	49176	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.645673990 CET	39267	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:29.767925978 CET	53	39267	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.768733978 CET	46405	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:29.890897036 CET	53	46405	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:29.891695023 CET	41190	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:30.014108896 CET	53	41190	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:30.014925957 CET	58793	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:30.137135029 CET	53	58793	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:30.138030052 CET	55584	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:30.260377884 CET	53	55584	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:30.261295080 CET	39939	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:30.383609056 CET	53	39939	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:30.384406090 CET	59822	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:30.506645918 CET	53	59822	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:32.419224024 CET	37822	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:32.541392088 CET	53	37822	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:32.542678118 CET	42673	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:32.664900064 CET	53	42673	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:32.666099072 CET	51984	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:32.788388014 CET	53	51984	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:32.789498091 CET	40355	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:32.911688089 CET	53	40355	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:32.912564993 CET	36098	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.034702063 CET	53	36098	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:33.035975933 CET	45665	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.158101082 CET	53	45665	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:33.159301996 CET	47750	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.281593084 CET	53	47750	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:33.282927990 CET	45473	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.405159950 CET	53	45473	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:33.406373024 CET	47841	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.528609991 CET	53	47841	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:33.529689074 CET	43305	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:33.651932001 CET	53	43305	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.008780003 CET	34098	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.130872011 CET	53	34098	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.132505894 CET	40373	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.254748106 CET	53	40373	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.256524086 CET	42503	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.378964901 CET	53	42503	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.380527973 CET	56127	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.502836943 CET	53	56127	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.504168034 CET	32981	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.626374006 CET	53	32981	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.627871990 CET	50754	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.750081062 CET	53	50754	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.751585960 CET	33134	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.873997927 CET	53	33134	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.875492096 CET	45062	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:35.997790098 CET	53	45062	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:35.999197960 CET	41931	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:36.121619940 CET	53	41931	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:36.123116016 CET	38135	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:36.245415926 CET	53	38135	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:37.665824890 CET	33520	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:37.788058043 CET	53	33520	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:37.789335966 CET	33628	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:37.911592960 CET	53	33628	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:37.914757967 CET	33507	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.036948919 CET	53	33507	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.038525105 CET	43682	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.160679102 CET	53	43682	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.162390947 CET	46062	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.284605980 CET	53	46062	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.286273003 CET	52965	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.408479929 CET	53	52965	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.409928083 CET	53186	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.532128096 CET	53	53186	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.533487082 CET	40239	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.655872107 CET	53	40239	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.657485962 CET	51643	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.779831886 CET	53	51643	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:38.781466961 CET	53398	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:38.904171944 CET	53	53398	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.307545900 CET	59629	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:40.429754972 CET	53	59629	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.430708885 CET	60712	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:40.552901030 CET	53	60712	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.553904057 CET	48778	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:40.676049948 CET	53	48778	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.676888943 CET	55195	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:40.800391912 CET	53	55195	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.801230907 CET	51246	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:40.923877001 CET	53	51246	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:40.924700975 CET	53376	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:41.046976089 CET	53	53376	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:41.047833920 CET	43393	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:41.170135021 CET	53	43393	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:41.171004057 CET	40723	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:41.293255091 CET	53	40723	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:41.294197083 CET	34018	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:41.416512966 CET	53	34018	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:41.417387009 CET	38944	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:41.539633989 CET	53	38944	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:42.914736032 CET	43548	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.036907911 CET	53	43548	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.037805080 CET	48620	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.161003113 CET	53	48620	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.161946058 CET	43597	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.284142971 CET	53	43597	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.285147905 CET	49959	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.407357931 CET	53	49959	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.408253908 CET	40492	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.530528069 CET	53	40492	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.531450033 CET	60489	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.653834105 CET	53	60489	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.655055046 CET	57603	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.778217077 CET	53	57603	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.779131889 CET	50234	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:43.901396990 CET	53	50234	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:43.902209997 CET	34945	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:44.024568081 CET	53	34945	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:44.025338888 CET	51297	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:44.147733927 CET	53	51297	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:45.557990074 CET	35665	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:45.680191994 CET	53	35665	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:45.681041956 CET	57192	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:45.803247929 CET	53	57192	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:45.804279089 CET	33485	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:45.926501036 CET	53	33485	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:45.927275896 CET	32943	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.049491882 CET	53	32943	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.050561905 CET	57079	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.172764063 CET	53	57079	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.173609018 CET	35835	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.295916080 CET	53	35835	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.296838045 CET	37884	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.419248104 CET	53	37884	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.420825958 CET	59590	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.543076992 CET	53	59590	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.544265032 CET	34723	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.666749954 CET	53	34723	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:46.667623997 CET	41521	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:46.789906025 CET	53	41521	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.194884062 CET	58062	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.317063093 CET	53	58062	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.317859888 CET	48330	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.440041065 CET	53	48330	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.441261053 CET	48599	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.563571930 CET	53	48599	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.564498901 CET	47625	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.686755896 CET	53	47625	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.687693119 CET	48854	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.809911966 CET	53	48854	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.810902119 CET	55952	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:48.933214903 CET	53	55952	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:48.934209108 CET	52300	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:49.056700945 CET	53	52300	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:49.057617903 CET	35040	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:49.179867029 CET	53	35040	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:49.180824041 CET	44297	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:49.303247929 CET	53	44297	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:49.304141045 CET	43967	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:49.426898956 CET	53	43967	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:50.831075907 CET	53636	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:50.953387022 CET	53	53636	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:50.954586983 CET	48166	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.076878071 CET	53	48166	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.077989101 CET	38494	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.200192928 CET	53	38494	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.201109886 CET	51485	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.323353052 CET	53	51485	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.324152946 CET	39225	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.446501017 CET	53	39225	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.447344065 CET	41447	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.569561958 CET	53	41447	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.570401907 CET	51452	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.692682981 CET	53	51452	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.693423033 CET	59349	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.815685034 CET	53	59349	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.816540003 CET	46882	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:51.938992977 CET	53	46882	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:51.939941883 CET	40294	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:52.062269926 CET	53	40294	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:53.520095110 CET	42859	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:53.642294884 CET	53	42859	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:53.643588066 CET	59944	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:53.766118050 CET	53	59944	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:53.767198086 CET	47830	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:53.889328957 CET	53	47830	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:53.890197992 CET	35565	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.012378931 CET	53	35565	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.013578892 CET	57632	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.135739088 CET	53	57632	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.136831045 CET	44234	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.259110928 CET	53	44234	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.260150909 CET	47837	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.382430077 CET	53	47837	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.383182049 CET	39186	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.505443096 CET	53	39186	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.506629944 CET	48858	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.628885031 CET	53	48858	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:54.629750013 CET	50439	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:54.751960039 CET	53	50439	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.166302919 CET	38539	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.288527012 CET	53	38539	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.289474964 CET	46568	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.411698103 CET	53	46568	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.412609100 CET	58270	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.534820080 CET	53	58270	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.536277056 CET	33912	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.658575058 CET	53	33912	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.659667969 CET	45525	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.782062054 CET	53	45525	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.782804966 CET	42560	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:56.905152082 CET	53	42560	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:56.906080008 CET	33336	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:57.028434992 CET	53	33336	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:57.029284000 CET	52267	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:57.151607037 CET	53	52267	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:57.153096914 CET	45430	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:57.275361061 CET	53	45430	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:57.276139975 CET	36013	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:57.398416996 CET	53	36013	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:58.826472998 CET	59410	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:58.949018002 CET	53	59410	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:58.950242996 CET	36117	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.072386026 CET	53	36117	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.073790073 CET	60975	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.195977926 CET	53	60975	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.197354078 CET	46542	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.319494963 CET	53	46542	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.320611000 CET	35842	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.442893982 CET	53	35842	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.444422007 CET	34940	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.566843987 CET	53	34940	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.568181992 CET	52521	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.690587997 CET	53	52521	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.692024946 CET	50554	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.814320087 CET	53	50554	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.815728903 CET	60259	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:57:59.938131094 CET	53	60259	8.8.8.8	192.168.2.23
Dec 28, 2024 23:57:59.939353943 CET	57678	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:00.061705112 CET	53	57678	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:01.426605940 CET	43670	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:01.548774004 CET	53	43670	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:01.550321102 CET	35066	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:01.672480106 CET	53	35066	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:01.673998117 CET	53962	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:01.796400070 CET	53	53962	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:01.797698975 CET	37446	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:01.919907093 CET	53	37446	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:01.921231031 CET	42754	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.043425083 CET	53	42754	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:02.044503927 CET	40917	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.166748047 CET	53	40917	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:02.168322086 CET	49724	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.290594101 CET	53	49724	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:02.291857958 CET	53778	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.414119959 CET	53	53778	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:02.415359020 CET	44454	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.537585020 CET	53	44454	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:02.539239883 CET	56375	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:02.661467075 CET	53	56375	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.119432926 CET	39535	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.241673946 CET	53	39535	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.242969990 CET	59155	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.365292072 CET	53	59155	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.366942883 CET	40938	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.489473104 CET	53	40938	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.491082907 CET	37246	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.613322020 CET	53	37246	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.614826918 CET	51145	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.737081051 CET	53	51145	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.738614082 CET	49278	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.860912085 CET	53	49278	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.862664938 CET	51751	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:04.984925032 CET	53	51751	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:04.986579895 CET	51096	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:05.109029055 CET	53	51096	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:05.110483885 CET	48573	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:05.232781887 CET	53	48573	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:05.234574080 CET	54838	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:05.356934071 CET	53	54838	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:06.721837997 CET	57372	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:06.844249010 CET	53	57372	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:06.845880032 CET	33475	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:06.968317032 CET	53	33475	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:06.969705105 CET	57097	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.091944933 CET	53	57097	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.093189001 CET	56867	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.215646982 CET	53	56867	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.216723919 CET	38255	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.338989019 CET	53	38255	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.340548992 CET	57670	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.462955952 CET	53	57670	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.464131117 CET	36185	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.586425066 CET	53	36185	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.587697029 CET	38136	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.710062981 CET	53	38136	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.711510897 CET	51455	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.833770037 CET	53	51455	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:07.835422039 CET	41078	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:07.957705021 CET	53	41078	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.370119095 CET	42381	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:09.492379904 CET	53	42381	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.493357897 CET	55315	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:09.615572929 CET	53	55315	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.616686106 CET	42398	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:09.738936901 CET	53	42398	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.740499973 CET	42404	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:09.862761021 CET	53	42404	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.864243031 CET	38471	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:09.986563921 CET	53	38471	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:09.987876892 CET	45601	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:10.110287905 CET	53	45601	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:10.111404896 CET	51875	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:10.233639002 CET	53	51875	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:10.235203028 CET	55939	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:10.357412100 CET	53	55939	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:10.358587027 CET	53625	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:10.480835915 CET	53	53625	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:10.481990099 CET	46643	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:10.604212046 CET	53	46643	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.007064104 CET	59205	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.129230976 CET	53	59205	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.130320072 CET	54962	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.252687931 CET	53	54962	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.253828049 CET	57968	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.376202106 CET	53	57968	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.377578974 CET	44774	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.499840021 CET	53	44774	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.500921965 CET	36688	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.623056889 CET	53	36688	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.624330044 CET	34256	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.746577978 CET	53	34256	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.747255087 CET	57175	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.869509935 CET	53	57175	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.870335102 CET	41052	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:12.992569923 CET	53	41052	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:12.993966103 CET	60761	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:13.116225004 CET	53	60761	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:13.117501974 CET	46414	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:13.239716053 CET	53	46414	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:14.613425016 CET	51305	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:14.735560894 CET	53	51305	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:14.737684011 CET	54672	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:14.859922886 CET	53	54672	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:14.862287045 CET	51462	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:14.984512091 CET	53	51462	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:14.985677958 CET	55926	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.108032942 CET	53	55926	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.109630108 CET	51582	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.231816053 CET	53	51582	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.233052015 CET	39420	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.355261087 CET	53	39420	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.356780052 CET	49110	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.478956938 CET	53	49110	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.480703115 CET	41348	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.602880001 CET	53	41348	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.604425907 CET	56050	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.727348089 CET	53	56050	8.8.8.8	192.168.2.23
Dec 28, 2024 23:58:15.728950977 CET	45855	53	192.168.2.23	8.8.8.8
Dec 28, 2024 23:58:15.851182938 CET	53	45855	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 28, 2024 23:57:00.051124096 CET	192.168.2.23	8.8.8.8	0x60bf	Standard query (0)	raw.intenseapi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2024 23:57:02.213007927 CET	192.168.2.23	8.8.8.8	0x4485	Standard query (0)	raw.intenseapi.com. [malformed]	256	318	false
Dec 28, 2024 23:57:02.336050034 CET	192.168.2.23	8.8.8.8	0x4485	Standard query (0)	raw.intenseapi.com. [malformed]	256	318	false
Dec 28, 2024 23:57:02.459434032 CET	192.168.2.23	8.8.8.8	0x4485	Standard query (0)	raw.intenseapi.com. [malformed]	256	318	false
Dec 28, 2024 23:57:02.582562923 CET	192.168.2.23	8.8.8.8	0x4485	Standard query (0)	raw.intenseapi.com. [malformed]	256	318	false
Dec 28, 2024 23:57:02.705657005 CET	192.168.2.23	8.8.8.8	0x4485	Standard query (0)	raw.intenseapi.com. [malformed]	256	318	false
Dec 28, 2024 23:57:04.849437952 CET	192.168.2.23	8.8.8.8	0x1c8c	Standard query (0)	raw.intenseapi.com. [malformed]	256	320	false
Dec 28, 2024 23:57:04.972518921 CET	192.168.2.23	8.8.8.8	0x1c8c	Standard query (0)	raw.intenseapi.com. [malformed]	256	321	false
Dec 28, 2024 23:57:05.095529079 CET	192.168.2.23	8.8.8.8	0x1c8c	Standard query (0)	raw.intenseapi.com. [malformed]	256	321	false
Dec 28, 2024 23:57:05.218661070 CET	192.168.2.23	8.8.8.8	0x1c8c	Standard query (0)	raw.intenseapi.com. [malformed]	256	321	false
Dec 28, 2024 23:57:05.341952085 CET	192.168.2.23	8.8.8.8	0x1c8c	Standard query (0)	raw.intenseapi.com. [malformed]	256	321	false
Dec 28, 2024 23:57:07.529201031 CET	192.168.2.23	8.8.8.8	0x3d73	Standard query (0)	raw.intenseapi.com. [malformed]	256	323	false
Dec 28, 2024 23:57:07.652230024 CET	192.168.2.23	8.8.8.8	0x3d73	Standard query (0)	raw.intenseapi.com. [malformed]	256	323	false
Dec 28, 2024 23:57:07.775454044 CET	192.168.2.23	8.8.8.8	0x3d73	Standard query (0)	raw.intenseapi.com. [malformed]	256	323	false
Dec 28, 2024 23:57:07.898598909 CET	192.168.2.23	8.8.8.8	0x3d73	Standard query (0)	raw.intenseapi.com. [malformed]	256	323	false
Dec 28, 2024 23:57:08.021585941 CET	192.168.2.23	8.8.8.8	0x3d73	Standard query (0)	raw.intenseapi.com. [malformed]	256	324	false
Dec 28, 2024 23:57:10.125874996 CET	192.168.2.23	8.8.8.8	0xa6f5	Standard query (0)	raw.intenseapi.com. [malformed]	256	326	false
Dec 28, 2024 23:57:10.249705076 CET	192.168.2.23	8.8.8.8	0xa6f5	Standard query (0)	raw.intenseapi.com. [malformed]	256	326	false
Dec 28, 2024 23:57:10.373265028 CET	192.168.2.23	8.8.8.8	0xa6f5	Standard query (0)	raw.intenseapi.com. [malformed]	256	326	false
Dec 28, 2024 23:57:10.496423006 CET	192.168.2.23	8.8.8.8	0xa6f5	Standard query (0)	raw.intenseapi.com. [malformed]	256	326	false
Dec 28, 2024 23:57:10.619692087 CET	192.168.2.23	8.8.8.8	0xa6f5	Standard query (0)	raw.intenseapi.com. [malformed]	256	326	false
Dec 28, 2024 23:57:12.762265921 CET	192.168.2.23	8.8.8.8	0x74bb	Standard query (0)	raw.intenseapi.com. [malformed]	256	328	false
Dec 28, 2024 23:57:12.886267900 CET	192.168.2.23	8.8.8.8	0x74bb	Standard query (0)	raw.intenseapi.com. [malformed]	256	329	false
Dec 28, 2024 23:57:13.009596109 CET	192.168.2.23	8.8.8.8	0x74bb	Standard query (0)	raw.intenseapi.com. [malformed]	256	329	false
Dec 28, 2024 23:57:13.132692099 CET	192.168.2.23	8.8.8.8	0x74bb	Standard query (0)	raw.intenseapi.com. [malformed]	256	329	false
Dec 28, 2024 23:57:13.255810976 CET	192.168.2.23	8.8.8.8	0x74bb	Standard query (0)	raw.intenseapi.com. [malformed]	256	329	false
Dec 28, 2024 23:57:15.406240940 CET	192.168.2.23	8.8.8.8	0xe7e2	Standard query (0)	raw.intenseapi.com. [malformed]	256	331	false
Dec 28, 2024 23:57:15.530047894 CET	192.168.2.23	8.8.8.8	0xe7e2	Standard query (0)	raw.intenseapi.com. [malformed]	256	331	false
Dec 28, 2024 23:57:15.653599024 CET	192.168.2.23	8.8.8.8	0xe7e2	Standard query (0)	raw.intenseapi.com. [malformed]	256	331	false
Dec 28, 2024 23:57:15.777018070 CET	192.168.2.23	8.8.8.8	0xe7e2	Standard query (0)	raw.intenseapi.com. [malformed]	256	331	false
Dec 28, 2024 23:57:15.900367022 CET	192.168.2.23	8.8.8.8	0xe7e2	Standard query (0)	raw.intenseapi.com. [malformed]	256	332	false
Dec 28, 2024 23:57:18.052169085 CET	192.168.2.23	8.8.8.8	0xd8cd	Standard query (0)	raw.intenseapi.com. [malformed]	256	334	false
Dec 28, 2024 23:57:18.176153898 CET	192.168.2.23	8.8.8.8	0xd8cd	Standard query (0)	raw.intenseapi.com. [malformed]	256	334	false
Dec 28, 2024 23:57:18.300065041 CET	192.168.2.23	8.8.8.8	0xd8cd	Standard query (0)	raw.intenseapi.com. [malformed]	256	334	false
Dec 28, 2024 23:57:18.423801899 CET	192.168.2.23	8.8.8.8	0xd8cd	Standard query (0)	raw.intenseapi.com. [malformed]	256	334	false
Dec 28, 2024 23:57:18.547863007 CET	192.168.2.23	8.8.8.8	0xd8cd	Standard query (0)	raw.intenseapi.com. [malformed]	256	334	false
Dec 28, 2024 23:57:20.692878962 CET	192.168.2.23	8.8.8.8	0xa1a9	Standard query (0)	raw.intenseapi.com. [malformed]	256	336	false
Dec 28, 2024 23:57:20.816318035 CET	192.168.2.23	8.8.8.8	0xa1a9	Standard query (0)	raw.intenseapi.com. [malformed]	256	336	false
Dec 28, 2024 23:57:20.939866066 CET	192.168.2.23	8.8.8.8	0xa1a9	Standard query (0)	raw.intenseapi.com. [malformed]	256	337	false
Dec 28, 2024 23:57:21.063236952 CET	192.168.2.23	8.8.8.8	0xa1a9	Standard query (0)	raw.intenseapi.com. [malformed]	256	337	false
Dec 28, 2024 23:57:21.189304113 CET	192.168.2.23	8.8.8.8	0xa1a9	Standard query (0)	raw.intenseapi.com. [malformed]	256	337	false
Dec 28, 2024 23:57:23.294007063 CET	192.168.2.23	8.8.8.8	0x4b6a	Standard query (0)	raw.intenseapi.com. [malformed]	256	339	false
Dec 28, 2024 23:57:23.417370081 CET	192.168.2.23	8.8.8.8	0x4b6a	Standard query (0)	raw.intenseapi.com. [malformed]	256	339	false
Dec 28, 2024 23:57:23.540554047 CET	192.168.2.23	8.8.8.8	0x4b6a	Standard query (0)	raw.intenseapi.com. [malformed]	256	339	false
Dec 28, 2024 23:57:23.664074898 CET	192.168.2.23	8.8.8.8	0x4b6a	Standard query (0)	raw.intenseapi.com. [malformed]	256	339	false
Dec 28, 2024 23:57:23.787491083 CET	192.168.2.23	8.8.8.8	0x4b6a	Standard query (0)	raw.intenseapi.com. [malformed]	256	339	false
Dec 28, 2024 23:57:25.939989090 CET	192.168.2.23	8.8.8.8	0xab3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	342	false
Dec 28, 2024 23:57:26.063707113 CET	192.168.2.23	8.8.8.8	0xab3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	342	false
Dec 28, 2024 23:57:26.187418938 CET	192.168.2.23	8.8.8.8	0xab3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	342	false
Dec 28, 2024 23:57:26.310506105 CET	192.168.2.23	8.8.8.8	0xab3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	342	false
Dec 28, 2024 23:57:26.433631897 CET	192.168.2.23	8.8.8.8	0xab3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	342	false
Dec 28, 2024 23:57:29.274981022 CET	192.168.2.23	8.8.8.8	0x35dd	Standard query (0)	raw.intenseapi.com. [malformed]	256	345	false
Dec 28, 2024 23:57:29.398725986 CET	192.168.2.23	8.8.8.8	0x35dd	Standard query (0)	raw.intenseapi.com. [malformed]	256	345	false
Dec 28, 2024 23:57:29.522310972 CET	192.168.2.23	8.8.8.8	0x35dd	Standard query (0)	raw.intenseapi.com. [malformed]	256	345	false
Dec 28, 2024 23:57:29.645673990 CET	192.168.2.23	8.8.8.8	0x35dd	Standard query (0)	raw.intenseapi.com. [malformed]	256	345	false
Dec 28, 2024 23:57:29.768733978 CET	192.168.2.23	8.8.8.8	0x35dd	Standard query (0)	raw.intenseapi.com. [malformed]	256	345	false
Dec 28, 2024 23:57:32.419224024 CET	192.168.2.23	8.8.8.8	0xd6dc	Standard query (0)	raw.intenseapi.com. [malformed]	256	348	false
Dec 28, 2024 23:57:32.542678118 CET	192.168.2.23	8.8.8.8	0xd6dc	Standard query (0)	raw.intenseapi.com. [malformed]	256	348	false
Dec 28, 2024 23:57:32.666099072 CET	192.168.2.23	8.8.8.8	0xd6dc	Standard query (0)	raw.intenseapi.com. [malformed]	256	348	false
Dec 28, 2024 23:57:32.789498091 CET	192.168.2.23	8.8.8.8	0xd6dc	Standard query (0)	raw.intenseapi.com. [malformed]	256	348	false
Dec 28, 2024 23:57:32.912564993 CET	192.168.2.23	8.8.8.8	0xd6dc	Standard query (0)	raw.intenseapi.com. [malformed]	256	349	false
Dec 28, 2024 23:57:35.008780003 CET	192.168.2.23	8.8.8.8	0x6851	Standard query (0)	raw.intenseapi.com. [malformed]	256	351	false
Dec 28, 2024 23:57:35.132505894 CET	192.168.2.23	8.8.8.8	0x6851	Standard query (0)	raw.intenseapi.com. [malformed]	256	351	false
Dec 28, 2024 23:57:35.256524086 CET	192.168.2.23	8.8.8.8	0x6851	Standard query (0)	raw.intenseapi.com. [malformed]	256	351	false
Dec 28, 2024 23:57:35.380527973 CET	192.168.2.23	8.8.8.8	0x6851	Standard query (0)	raw.intenseapi.com. [malformed]	256	351	false
Dec 28, 2024 23:57:35.504168034 CET	192.168.2.23	8.8.8.8	0x6851	Standard query (0)	raw.intenseapi.com. [malformed]	256	351	false
Dec 28, 2024 23:57:37.665824890 CET	192.168.2.23	8.8.8.8	0x4d95	Standard query (0)	raw.intenseapi.com. [malformed]	256	353	false
Dec 28, 2024 23:57:37.789335966 CET	192.168.2.23	8.8.8.8	0x4d95	Standard query (0)	raw.intenseapi.com. [malformed]	256	353	false
Dec 28, 2024 23:57:37.914757967 CET	192.168.2.23	8.8.8.8	0x4d95	Standard query (0)	raw.intenseapi.com. [malformed]	256	354	false
Dec 28, 2024 23:57:38.038525105 CET	192.168.2.23	8.8.8.8	0x4d95	Standard query (0)	raw.intenseapi.com. [malformed]	256	354	false
Dec 28, 2024 23:57:38.162390947 CET	192.168.2.23	8.8.8.8	0x4d95	Standard query (0)	raw.intenseapi.com. [malformed]	256	354	false
Dec 28, 2024 23:57:40.307545900 CET	192.168.2.23	8.8.8.8	0xb341	Standard query (0)	raw.intenseapi.com. [malformed]	256	356	false
Dec 28, 2024 23:57:40.430708885 CET	192.168.2.23	8.8.8.8	0xb341	Standard query (0)	raw.intenseapi.com. [malformed]	256	356	false
Dec 28, 2024 23:57:40.553904057 CET	192.168.2.23	8.8.8.8	0xb341	Standard query (0)	raw.intenseapi.com. [malformed]	256	356	false
Dec 28, 2024 23:57:40.676888943 CET	192.168.2.23	8.8.8.8	0xb341	Standard query (0)	raw.intenseapi.com. [malformed]	256	356	false
Dec 28, 2024 23:57:40.801230907 CET	192.168.2.23	8.8.8.8	0xb341	Standard query (0)	raw.intenseapi.com. [malformed]	256	356	false
Dec 28, 2024 23:57:42.914736032 CET	192.168.2.23	8.8.8.8	0x469b	Standard query (0)	raw.intenseapi.com. [malformed]	256	359	false
Dec 28, 2024 23:57:43.037805080 CET	192.168.2.23	8.8.8.8	0x469b	Standard query (0)	raw.intenseapi.com. [malformed]	256	359	false
Dec 28, 2024 23:57:43.161946058 CET	192.168.2.23	8.8.8.8	0x469b	Standard query (0)	raw.intenseapi.com. [malformed]	256	359	false
Dec 28, 2024 23:57:43.285147905 CET	192.168.2.23	8.8.8.8	0x469b	Standard query (0)	raw.intenseapi.com. [malformed]	256	359	false
Dec 28, 2024 23:57:43.408253908 CET	192.168.2.23	8.8.8.8	0x469b	Standard query (0)	raw.intenseapi.com. [malformed]	256	359	false
Dec 28, 2024 23:57:45.557990074 CET	192.168.2.23	8.8.8.8	0xaf7	Standard query (0)	raw.intenseapi.com. [malformed]	256	361	false
Dec 28, 2024 23:57:45.681041956 CET	192.168.2.23	8.8.8.8	0xaf7	Standard query (0)	raw.intenseapi.com. [malformed]	256	361	false
Dec 28, 2024 23:57:45.804279089 CET	192.168.2.23	8.8.8.8	0xaf7	Standard query (0)	raw.intenseapi.com. [malformed]	256	361	false
Dec 28, 2024 23:57:45.927275896 CET	192.168.2.23	8.8.8.8	0xaf7	Standard query (0)	raw.intenseapi.com. [malformed]	256	362	false
Dec 28, 2024 23:57:46.050561905 CET	192.168.2.23	8.8.8.8	0xaf7	Standard query (0)	raw.intenseapi.com. [malformed]	256	362	false
Dec 28, 2024 23:57:48.194884062 CET	192.168.2.23	8.8.8.8	0x8b3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	364	false
Dec 28, 2024 23:57:48.317859888 CET	192.168.2.23	8.8.8.8	0x8b3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	364	false
Dec 28, 2024 23:57:48.441261053 CET	192.168.2.23	8.8.8.8	0x8b3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	364	false
Dec 28, 2024 23:57:48.564498901 CET	192.168.2.23	8.8.8.8	0x8b3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	364	false
Dec 28, 2024 23:57:48.687693119 CET	192.168.2.23	8.8.8.8	0x8b3c	Standard query (0)	raw.intenseapi.com. [malformed]	256	364	false
Dec 28, 2024 23:57:50.831075907 CET	192.168.2.23	8.8.8.8	0x6947	Standard query (0)	raw.intenseapi.com. [malformed]	256	366	false
Dec 28, 2024 23:57:50.954586983 CET	192.168.2.23	8.8.8.8	0x6947	Standard query (0)	raw.intenseapi.com. [malformed]	256	367	false
Dec 28, 2024 23:57:51.077989101 CET	192.168.2.23	8.8.8.8	0x6947	Standard query (0)	raw.intenseapi.com. [malformed]	256	367	false
Dec 28, 2024 23:57:51.201109886 CET	192.168.2.23	8.8.8.8	0x6947	Standard query (0)	raw.intenseapi.com. [malformed]	256	367	false
Dec 28, 2024 23:57:51.324152946 CET	192.168.2.23	8.8.8.8	0x6947	Standard query (0)	raw.intenseapi.com. [malformed]	256	367	false
Dec 28, 2024 23:57:53.520095110 CET	192.168.2.23	8.8.8.8	0xd085	Standard query (0)	raw.intenseapi.com. [malformed]	256	369	false
Dec 28, 2024 23:57:53.643588066 CET	192.168.2.23	8.8.8.8	0xd085	Standard query (0)	raw.intenseapi.com. [malformed]	256	369	false
Dec 28, 2024 23:57:53.767198086 CET	192.168.2.23	8.8.8.8	0xd085	Standard query (0)	raw.intenseapi.com. [malformed]	256	369	false
Dec 28, 2024 23:57:53.890197992 CET	192.168.2.23	8.8.8.8	0xd085	Standard query (0)	raw.intenseapi.com. [malformed]	256	370	false
Dec 28, 2024 23:57:54.013578892 CET	192.168.2.23	8.8.8.8	0xd085	Standard query (0)	raw.intenseapi.com. [malformed]	256	370	false
Dec 28, 2024 23:57:56.166302919 CET	192.168.2.23	8.8.8.8	0x5fbf	Standard query (0)	raw.intenseapi.com. [malformed]	256	372	false
Dec 28, 2024 23:57:56.289474964 CET	192.168.2.23	8.8.8.8	0x5fbf	Standard query (0)	raw.intenseapi.com. [malformed]	256	372	false
Dec 28, 2024 23:57:56.412609100 CET	192.168.2.23	8.8.8.8	0x5fbf	Standard query (0)	raw.intenseapi.com. [malformed]	256	372	false
Dec 28, 2024 23:57:56.536277056 CET	192.168.2.23	8.8.8.8	0x5fbf	Standard query (0)	raw.intenseapi.com. [malformed]	256	372	false
Dec 28, 2024 23:57:56.659667969 CET	192.168.2.23	8.8.8.8	0x5fbf	Standard query (0)	raw.intenseapi.com. [malformed]	256	372	false
Dec 28, 2024 23:57:58.826472998 CET	192.168.2.23	8.8.8.8	0x5d6b	Standard query (0)	raw.intenseapi.com. [malformed]	256	374	false
Dec 28, 2024 23:57:58.950242996 CET	192.168.2.23	8.8.8.8	0x5d6b	Standard query (0)	raw.intenseapi.com. [malformed]	256	375	false
Dec 28, 2024 23:57:59.073790073 CET	192.168.2.23	8.8.8.8	0x5d6b	Standard query (0)	raw.intenseapi.com. [malformed]	256	375	false
Dec 28, 2024 23:57:59.197354078 CET	192.168.2.23	8.8.8.8	0x5d6b	Standard query (0)	raw.intenseapi.com. [malformed]	256	375	false
Dec 28, 2024 23:57:59.320611000 CET	192.168.2.23	8.8.8.8	0x5d6b	Standard query (0)	raw.intenseapi.com. [malformed]	256	375	false
Dec 28, 2024 23:58:01.426605940 CET	192.168.2.23	8.8.8.8	0xc7c	Standard query (0)	raw.intenseapi.com. [malformed]	256	377	false
Dec 28, 2024 23:58:01.550321102 CET	192.168.2.23	8.8.8.8	0xc7c	Standard query (0)	raw.intenseapi.com. [malformed]	256	377	false
Dec 28, 2024 23:58:01.673998117 CET	192.168.2.23	8.8.8.8	0xc7c	Standard query (0)	raw.intenseapi.com. [malformed]	256	377	false
Dec 28, 2024 23:58:01.797698975 CET	192.168.2.23	8.8.8.8	0xc7c	Standard query (0)	raw.intenseapi.com. [malformed]	256	377	false
Dec 28, 2024 23:58:01.921231031 CET	192.168.2.23	8.8.8.8	0xc7c	Standard query (0)	raw.intenseapi.com. [malformed]	256	378	false
Dec 28, 2024 23:58:04.119432926 CET	192.168.2.23	8.8.8.8	0x7d0a	Standard query (0)	raw.intenseapi.com. [malformed]	256	380	false
Dec 28, 2024 23:58:04.242969990 CET	192.168.2.23	8.8.8.8	0x7d0a	Standard query (0)	raw.intenseapi.com. [malformed]	256	380	false
Dec 28, 2024 23:58:04.366942883 CET	192.168.2.23	8.8.8.8	0x7d0a	Standard query (0)	raw.intenseapi.com. [malformed]	256	380	false
Dec 28, 2024 23:58:04.491082907 CET	192.168.2.23	8.8.8.8	0x7d0a	Standard query (0)	raw.intenseapi.com. [malformed]	256	380	false
Dec 28, 2024 23:58:04.614826918 CET	192.168.2.23	8.8.8.8	0x7d0a	Standard query (0)	raw.intenseapi.com. [malformed]	256	380	false
Dec 28, 2024 23:58:06.721837997 CET	192.168.2.23	8.8.8.8	0x74f1	Standard query (0)	raw.intenseapi.com. [malformed]	256	382	false
Dec 28, 2024 23:58:06.845880032 CET	192.168.2.23	8.8.8.8	0x74f1	Standard query (0)	raw.intenseapi.com. [malformed]	256	382	false
Dec 28, 2024 23:58:06.969705105 CET	192.168.2.23	8.8.8.8	0x74f1	Standard query (0)	raw.intenseapi.com. [malformed]	256	383	false
Dec 28, 2024 23:58:07.093189001 CET	192.168.2.23	8.8.8.8	0x74f1	Standard query (0)	raw.intenseapi.com. [malformed]	256	383	false
Dec 28, 2024 23:58:07.216723919 CET	192.168.2.23	8.8.8.8	0x74f1	Standard query (0)	raw.intenseapi.com. [malformed]	256	383	false
Dec 28, 2024 23:58:09.370119095 CET	192.168.2.23	8.8.8.8	0x686d	Standard query (0)	raw.intenseapi.com. [malformed]	256	385	false
Dec 28, 2024 23:58:09.493357897 CET	192.168.2.23	8.8.8.8	0x686d	Standard query (0)	raw.intenseapi.com. [malformed]	256	385	false
Dec 28, 2024 23:58:09.616686106 CET	192.168.2.23	8.8.8.8	0x686d	Standard query (0)	raw.intenseapi.com. [malformed]	256	385	false
Dec 28, 2024 23:58:09.740499973 CET	192.168.2.23	8.8.8.8	0x686d	Standard query (0)	raw.intenseapi.com. [malformed]	256	385	false
Dec 28, 2024 23:58:09.864243031 CET	192.168.2.23	8.8.8.8	0x686d	Standard query (0)	raw.intenseapi.com. [malformed]	256	385	false
Dec 28, 2024 23:58:12.007064104 CET	192.168.2.23	8.8.8.8	0x58d7	Standard query (0)	raw.intenseapi.com. [malformed]	256	388	false
Dec 28, 2024 23:58:12.130320072 CET	192.168.2.23	8.8.8.8	0x58d7	Standard query (0)	raw.intenseapi.com. [malformed]	256	388	false
Dec 28, 2024 23:58:12.253828049 CET	192.168.2.23	8.8.8.8	0x58d7	Standard query (0)	raw.intenseapi.com. [malformed]	256	388	false
Dec 28, 2024 23:58:12.377578974 CET	192.168.2.23	8.8.8.8	0x58d7	Standard query (0)	raw.intenseapi.com. [malformed]	256	388	false
Dec 28, 2024 23:58:12.500921965 CET	192.168.2.23	8.8.8.8	0x58d7	Standard query (0)	raw.intenseapi.com. [malformed]	256	388	false
Dec 28, 2024 23:58:14.613425016 CET	192.168.2.23	8.8.8.8	0x1959	Standard query (0)	raw.intenseapi.com. [malformed]	256	390	false
Dec 28, 2024 23:58:14.737684011 CET	192.168.2.23	8.8.8.8	0x1959	Standard query (0)	raw.intenseapi.com. [malformed]	256	390	false
Dec 28, 2024 23:58:14.862287045 CET	192.168.2.23	8.8.8.8	0x1959	Standard query (0)	raw.intenseapi.com. [malformed]	256	390	false
Dec 28, 2024 23:58:14.985677958 CET	192.168.2.23	8.8.8.8	0x1959	Standard query (0)	raw.intenseapi.com. [malformed]	256	391	false
Dec 28, 2024 23:58:15.109630108 CET	192.168.2.23	8.8.8.8	0x1959	Standard query (0)	raw.intenseapi.com. [malformed]	256	391	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 28, 2024 23:57:00.185025930 CET	8.8.8.8	192.168.2.23	0x60bf	No error (0)	raw.intenseapi.com		193.200.78.37	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: Aqua.m68k.elf PID: 6247, Parent PID: 6163

General

Start time (UTC):	22:56:58
Start date (UTC):	28/12/2024
Path:	/tmp/Aqua.m68k.elf
Arguments:	/tmp/Aqua.m68k.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: Aqua.m68k.elf PID: 6250, Parent PID: 6247

General

Start time (UTC):	22:56:58
Start date (UTC):	28/12/2024
Path:	/tmp/Aqua.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.m68k.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.wZTbeA (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: Aqua.m68k.elf PID: 6247, Parent PID: 6163

General

Chronological Activities

Analysis Process: Aqua.m68k.elf PID: 6250, Parent PID: 6247

General

Chronological Activities

Linux Analysis Report
Aqua.m68k.elf