Edit tour

Linux Analysis Report
Aqua.dbg.elf

Overview

General Information

Sample name:	Aqua.dbg.elf
Analysis ID:	1591844
MD5:	10ac916c0e84105b1467a08e34c21b9f
SHA1:	d75dd24c1ab0d1806a735ce3b20e81ce1820a886
SHA256:	7b68145145fa9a98450105f08ac00c37c13ffec8535f7f2f1f0d6bac35234578
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591844
Start date and time:	2025-01-15 14:50:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.dbg.elf
Detection:	MAL
Classification:	mal64.evad.linELF@0/0@138/0

Runtime Messages

Command:	/tmp/Aqua.dbg.elf
PID:	6235
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:	about to cum inside a femboy btw [main] created new process group [main/ensure] no other instance detected, joining botnet [main] failed to hide cmdline name, continuing anyway [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [main/conn]: connected to C&C (addr: 386050240) [main/conn]: received buffer length is too large, closing connection [main/conn]: attempting to connect to cnc [resolv] Got response from select [resolv] Found IP address: 178.215.238.48 Resolved ofewu.eye-network.ru to 1 IPv4 addresses [main] Resolved domain [resolv] Got response from select [resolv] Found IP address: 178.215.238.48
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.dbg.elf (PID: 6235, Parent: 6154, MD5: 10ac916c0e84105b1467a08e34c21b9f) Arguments: /tmp/Aqua.dbg.elf

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.dbg.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xddf8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
Aqua.dbg.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xe66f:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xabc6:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x10274:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x10ffe:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x15b2a:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
Aqua.dbg.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xe22f:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
Aqua.dbg.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x14266:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
Aqua.dbg.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xe4fa:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
Aqua.dbg.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x1445f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Aqua.dbg.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x38a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
Aqua.dbg.elf	Linux_Trojan_Mirai_449937aa	unknown	unknown	0x17aee:$a: 00 00 5B 72 65 73 6F 6C 76 5D 20 46 6F 75 6E 64 20 49 50 20
Aqua.dbg.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x48d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
Aqua.dbg.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4542:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 8 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xddf8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xe66f:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xabc6:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x10274:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x10ffe:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x15b2a:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xe22f:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x14266:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xe4fa:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x1445f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x38a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Mirai_449937aa	unknown	unknown	0x17aee:$a: 00 00 5B 72 65 73 6F 6C 76 5D 20 46 6F 75 6E 64 20 49 50 20
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x48d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
6235.1.0000000000400000.000000000041a000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4542:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 8 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Aqua.dbg.elf	Virustotal: Detection: 40%			Perma Link
Source: Aqua.dbg.elf	ReversingLabs: Detection: 34%

Machine Learning detection for sample

Source: Aqua.dbg.elf

Joe Sandbox ML: detected

Source: global traffic

TCP traffic: 192.168.2.23:48600 -> 178.215.238.48:33966

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43

Source: global traffic

DNS traffic detected: DNS query: ofewu.eye-network.ru

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_449937aa Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa reference_sample = 6f27766534445cffb097c7c52db1fca53b2210c1b10b75594f77c34dc8b994fe, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = cf2c6b86830099f039b41aeaafbffedfb8294a1124c499e99a11f48a06cd1dfd, id = 449937aa-682a-4906-89ab-80d7127e461e, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_449937aa reference_sample = 6f27766534445cffb097c7c52db1fca53b2210c1b10b75594f77c34dc8b994fe, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = cf2c6b86830099f039b41aeaafbffedfb8294a1124c499e99a11f48a06cd1dfd, id = 449937aa-682a-4906-89ab-80d7127e461e, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.000000000041a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal64.evad.linELF@0/0@138/0

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.dbg.elf (PID: 6235)

File: /tmp/Aqua.dbg.elf

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.dbg.elf	41%	Virustotal		Browse
Aqua.dbg.elf	34%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.dbg.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ofewu.eye-network.ru	178.215.238.48	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
178.215.238.48	ofewu.eye-network.ru	Germany	10753	LVLT-10753US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
178.215.238.48	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	boooooos.x86_64.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	tftp.elf	Get hash	malicious	Unknown	Browse
	bin.sh.elf	Get hash	malicious	Mirai	Browse
	45.131.111.37-boatnet.arm5-2025-01-15T02_13_35.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ofewu.eye-network.ru	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
ofewu.eye-network.ru	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	178.215.238.48

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	boooooos.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	45.131.111.37-boatnet.arm5-2025-01-15T02_13_35.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	boooooos.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	45.131.111.37-boatnet.arm5-2025-01-15T02_13_35.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
LVLT-10753US	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	178.215.238.48
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	178.215.238.48
INIT7CH	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	boooooos.x86_64.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	bin.sh.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	45.131.111.37-boatnet.arm5-2025-01-15T02_13_35.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.216133434956119
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.dbg.elf
File size:	143'336 bytes
MD5:	10ac916c0e84105b1467a08e34c21b9f
SHA1:	d75dd24c1ab0d1806a735ce3b20e81ce1820a886
SHA256:	7b68145145fa9a98450105f08ac00c37c13ffec8535f7f2f1f0d6bac35234578
SHA512:	5ceb1617db6ec2d211525f703a8597f9cc4977579d0af858590028b843565ef4dfee72d29c538472ef16887648d2d4393b44f2eb4414eceff574947d63db2b28
SSDEEP:	3072:ObYrfvkaQb7CvH14G9Q9gF1ZP0qejXHas98t0u/EMb91U:2YrfvkaQ/CvVrFHqp8ms9O
TLSH:	D4E35A07B5C184FDC4D9C1748BAEA137EE72F42D1238B26F1BD4AA261E4DE314E6E254
File Content Preview:	.ELF..............>.......@.....@.......h-..........@.8...@.......................@.......@.....@.......@.................................Q.......Q.....(.......`...............Q.td....................................................H...._.....a..H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	142696
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x161c6	0x0	0x6	AX	16
.fini	PROGBITS	0x4162c6	0x162c6	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x4162e0	0x162e0	0x3b60	0x0	0x2	A	32
.ctors	PROGBITS	0x51a000	0x1a000	0x18	0x0	0x3	WA	8
.dtors	PROGBITS	0x51a018	0x1a018	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x51a040	0x1a040	0x8ce8	0x0	0x3	WA	32
.bss	NOBITS	0x522d40	0x22d28	0x7020	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x22d28	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x19e40	0x19e40	6.3641	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x1a000	0x51a000	0x51a000	0x8d28	0xfd60	0.2082	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 14:51:26.853319883 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:26.858294010 CET	33966	48600	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:26.858364105 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:26.858966112 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:26.863765955 CET	33966	48600	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:26.863816977 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:26.868683100 CET	33966	48600	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:27.491538048 CET	33966	48600	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:27.491754055 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.491754055 CET	48600	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.507738113 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.512562037 CET	33966	48602	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:27.512631893 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.513328075 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.518131018 CET	33966	48602	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:27.518208981 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:27.523014069 CET	33966	48602	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.155139923 CET	33966	48602	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.155395985 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.155395985 CET	48602	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.177196026 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.182008028 CET	33966	48604	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.182058096 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.182657957 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.187434912 CET	33966	48604	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.187516928 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.192349911 CET	33966	48604	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.229830980 CET	42836	443	192.168.2.23	91.189.91.43
Jan 15, 2025 14:51:28.808197975 CET	33966	48604	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.808444023 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.808526039 CET	48604	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.825880051 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.830748081 CET	33966	48606	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.830813885 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.831954002 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.836826086 CET	33966	48606	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.837068081 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:28.841975927 CET	33966	48606	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:28.997698069 CET	42516	80	192.168.2.23	109.202.202.202
Jan 15, 2025 14:51:29.482892990 CET	33966	48606	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:29.483110905 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.483150959 CET	48606	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.500154018 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.505033970 CET	33966	48608	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:29.505095005 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.505683899 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.510526896 CET	33966	48608	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:29.510658979 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:29.515531063 CET	33966	48608	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.140902996 CET	33966	48608	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.141210079 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.141298056 CET	48608	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.160301924 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.168092966 CET	33966	48610	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.168158054 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.168772936 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.173991919 CET	33966	48610	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.174062014 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.179096937 CET	33966	48610	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.800710917 CET	33966	48610	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.800868034 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.800882101 CET	48610	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.816418886 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.821253061 CET	33966	48612	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.821300983 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.821854115 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.826627970 CET	33966	48612	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:30.826674938 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:30.831451893 CET	33966	48612	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:31.444648981 CET	33966	48612	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:31.444891930 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.444891930 CET	48612	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.460385084 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.465205908 CET	33966	48614	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:31.465255976 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.465828896 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.470655918 CET	33966	48614	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:31.470696926 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:31.475429058 CET	33966	48614	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.121387005 CET	33966	48614	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.121601105 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.121601105 CET	48614	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.141007900 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.145776987 CET	33966	48616	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.145842075 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.146593094 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.151349068 CET	33966	48616	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.151406050 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.156163931 CET	33966	48616	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.768882036 CET	33966	48616	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.769045115 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.769074917 CET	48616	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.784806967 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.789580107 CET	33966	48618	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.789630890 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.790182114 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.794897079 CET	33966	48618	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:32.794941902 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:32.799799919 CET	33966	48618	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:33.421834946 CET	33966	48618	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:33.422065973 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.422065973 CET	48618	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.438684940 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.443588018 CET	33966	48620	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:33.443634033 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.444284916 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.449043989 CET	33966	48620	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:33.449088097 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:33.454109907 CET	33966	48620	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.066968918 CET	33966	48620	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.067157984 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.067205906 CET	48620	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.082844019 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.087620020 CET	33966	48622	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.087672949 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.088299036 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.093096018 CET	33966	48622	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.093154907 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.097915888 CET	33966	48622	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.722004890 CET	33966	48622	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.722382069 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.722382069 CET	48622	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.737855911 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.742846012 CET	33966	48624	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.742954016 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.743690014 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.748454094 CET	33966	48624	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:34.748533010 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:34.753326893 CET	33966	48624	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:35.369719982 CET	33966	48624	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:35.369952917 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.369952917 CET	48624	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.385471106 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.390724897 CET	33966	48626	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:35.390811920 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.391405106 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.396671057 CET	33966	48626	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:35.396744967 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:35.401748896 CET	33966	48626	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.037429094 CET	33966	48626	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.037808895 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.037810087 CET	48626	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.054029942 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.058809996 CET	33966	48628	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.058881998 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.059478998 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.064249992 CET	33966	48628	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.064297915 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.069041014 CET	33966	48628	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.702145100 CET	33966	48628	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.702404022 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.702404022 CET	48628	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.716917992 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.721729994 CET	33966	48630	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.721793890 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.722364902 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.727117062 CET	33966	48630	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:36.727169037 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:36.731942892 CET	33966	48630	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:37.357971907 CET	33966	48630	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:37.358144999 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.358174086 CET	48630	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.373589993 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.378371954 CET	33966	48632	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:37.378475904 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.378959894 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.383749008 CET	33966	48632	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:37.383809090 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:37.388557911 CET	33966	48632	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.002172947 CET	33966	48632	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.002368927 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.002532005 CET	48632	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.021815062 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.026678085 CET	33966	48634	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.026746035 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.027683973 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.032598972 CET	33966	48634	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.032681942 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.037461042 CET	33966	48634	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.650358915 CET	33966	48634	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.650896072 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.651089907 CET	48634	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.669610977 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.674503088 CET	33966	48636	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.674607992 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.675950050 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.680831909 CET	33966	48636	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:38.680915117 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:38.685849905 CET	33966	48636	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.301305056 CET	33966	48636	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.301518917 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.301734924 CET	48636	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.318639994 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.323493958 CET	33966	48638	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.323581934 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.324599028 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.329529047 CET	33966	48638	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.329597950 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.334429979 CET	33966	48638	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.948045015 CET	33966	48638	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.948252916 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.948453903 CET	48638	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.964679003 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.969535112 CET	33966	48640	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.969635963 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.970546007 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.975348949 CET	33966	48640	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:39.975415945 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:39.980241060 CET	33966	48640	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:40.597954988 CET	33966	48640	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:40.598176956 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.598222971 CET	48640	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.614788055 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.619601011 CET	33966	48642	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:40.619708061 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.620601892 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.625355959 CET	33966	48642	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:40.625426054 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:40.630203962 CET	33966	48642	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.241261959 CET	33966	48642	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.241450071 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.241585016 CET	48642	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.259700060 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.264509916 CET	33966	48644	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.264607906 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.265954971 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.270781994 CET	33966	48644	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.270868063 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.275760889 CET	33966	48644	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.889108896 CET	33966	48644	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.889570951 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.889571905 CET	48644	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.905592918 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.910442114 CET	33966	48646	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.910541058 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.911119938 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.916038036 CET	33966	48646	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:41.916125059 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:41.921077967 CET	33966	48646	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:42.555525064 CET	33966	48646	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:42.555860043 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.555860043 CET	48646	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.573617935 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.578500986 CET	33966	48648	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:42.578612089 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.579658985 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.584485054 CET	33966	48648	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:42.584584951 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:42.589404106 CET	33966	48648	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.210194111 CET	33966	48648	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.210402012 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.210452080 CET	48648	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.226648092 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.231498957 CET	33966	48650	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.231594086 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.232534885 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.237355947 CET	33966	48650	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.237431049 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.242263079 CET	33966	48650	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.587810993 CET	43928	443	192.168.2.23	91.189.91.42
Jan 15, 2025 14:51:43.883873940 CET	33966	48650	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.884125948 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.884248018 CET	48650	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.905478954 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.910417080 CET	33966	48652	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.910561085 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.911753893 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.916596889 CET	33966	48652	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:43.916662931 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:43.921484947 CET	33966	48652	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:44.544128895 CET	33966	48652	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:44.544302940 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.544454098 CET	48652	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.560894012 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.565742016 CET	33966	48654	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:44.565823078 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.566822052 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.571614981 CET	33966	48654	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:44.571688890 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:44.576499939 CET	33966	48654	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.235830069 CET	33966	48654	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.235956907 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.236037970 CET	48654	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.252947092 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.257754087 CET	33966	48656	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.257848978 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.258866072 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.263633966 CET	33966	48656	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.263700008 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.268515110 CET	33966	48656	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.881628036 CET	33966	48656	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.881788015 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.881864071 CET	48656	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.898127079 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.902941942 CET	33966	48658	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.903021097 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.904114008 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.908907890 CET	33966	48658	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:45.908972979 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:45.913786888 CET	33966	48658	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:46.538388014 CET	33966	48658	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:46.538511992 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.538554907 CET	48658	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.557853937 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.564194918 CET	33966	48660	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:46.564269066 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.565639973 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.571996927 CET	33966	48660	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:46.572061062 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:46.578150988 CET	33966	48660	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.203202963 CET	33966	48660	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.203459978 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.203531027 CET	48660	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.222321033 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.227184057 CET	33966	48662	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.227255106 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.228565931 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.233395100 CET	33966	48662	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.233479023 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.238254070 CET	33966	48662	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.851723909 CET	33966	48662	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.851998091 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.852068901 CET	48662	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.870037079 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.875335932 CET	33966	48664	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.875417948 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.876701117 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.881958961 CET	33966	48664	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:47.882019043 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:47.887346983 CET	33966	48664	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:48.518925905 CET	33966	48664	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:48.519095898 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.519170046 CET	48664	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.537818909 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.542604923 CET	33966	48666	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:48.542680025 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.544117928 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.548949957 CET	33966	48666	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:48.549015999 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:48.553883076 CET	33966	48666	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.166687965 CET	33966	48666	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.167110920 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.167112112 CET	48666	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.184633017 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.189450026 CET	33966	48668	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.189554930 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.190922976 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.195760965 CET	33966	48668	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.195838928 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.200704098 CET	33966	48668	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.813347101 CET	33966	48668	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.813549995 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.813549995 CET	48668	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.833697081 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.838550091 CET	33966	48670	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.838624954 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.839809895 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.844660997 CET	33966	48670	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:49.844780922 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:49.849555969 CET	33966	48670	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:50.462737083 CET	33966	48670	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:50.462940931 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.462940931 CET	48670	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.479512930 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.484335899 CET	33966	48672	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:50.484460115 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.485460043 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.490226984 CET	33966	48672	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:50.490298986 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:50.495107889 CET	33966	48672	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.127218008 CET	33966	48672	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.127609015 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.127609968 CET	48672	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.145522118 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.150424957 CET	33966	48674	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.150495052 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.151813030 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.156688929 CET	33966	48674	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.156749010 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.161593914 CET	33966	48674	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.777403116 CET	33966	48674	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.777594090 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.777707100 CET	48674	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.793951988 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.798803091 CET	33966	48676	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.798870087 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.799635887 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.804491043 CET	33966	48676	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:51.804548025 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:51.809467077 CET	33966	48676	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:52.420180082 CET	33966	48676	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:52.420411110 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.420707941 CET	48676	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.438303947 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.443213940 CET	33966	48678	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:52.443301916 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.444709063 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.449590921 CET	33966	48678	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:52.449657917 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:52.454669952 CET	33966	48678	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.095877886 CET	33966	48678	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.096110106 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.096151114 CET	48678	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.112734079 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.117618084 CET	33966	48680	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.117733955 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.118750095 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.123670101 CET	33966	48680	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.123801947 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.128720045 CET	33966	48680	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.770637989 CET	33966	48680	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.770819902 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.770859957 CET	48680	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.787672997 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.792522907 CET	33966	48682	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.792607069 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.793870926 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.798657894 CET	33966	48682	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.798732042 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:53.803574085 CET	33966	48682	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:53.826450109 CET	42836	443	192.168.2.23	91.189.91.43
Jan 15, 2025 14:51:54.413634062 CET	33966	48682	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:54.413794041 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.413841009 CET	48682	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.430318117 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.435168982 CET	33966	48684	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:54.435266972 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.436306953 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.441101074 CET	33966	48684	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:54.441175938 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:54.446057081 CET	33966	48684	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.078243971 CET	33966	48684	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.078424931 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.078461885 CET	48684	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.096425056 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.101974964 CET	33966	48686	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.102065086 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.102984905 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.109272003 CET	33966	48686	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.109349012 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.114173889 CET	33966	48686	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.746460915 CET	33966	48686	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.746669054 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.746669054 CET	48686	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.768520117 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.773350954 CET	33966	48688	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.773435116 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.774264097 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.779012918 CET	33966	48688	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:55.779066086 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:55.783909082 CET	33966	48688	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:56.407720089 CET	33966	48688	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:56.407850981 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.407918930 CET	48688	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.424123049 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.429048061 CET	33966	48690	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:56.429126024 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.430192947 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.434983969 CET	33966	48690	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:56.435050964 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:56.439940929 CET	33966	48690	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.049318075 CET	33966	48690	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.049463987 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.049489021 CET	48690	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.065921068 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.070800066 CET	33966	48692	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.070874929 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.071801901 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.076586962 CET	33966	48692	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.076656103 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.081434011 CET	33966	48692	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.694118023 CET	33966	48692	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.694371939 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.694418907 CET	48692	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.710046053 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.714948893 CET	33966	48694	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.715025902 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.716001034 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.721014977 CET	33966	48694	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:57.721106052 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:57.725945950 CET	33966	48694	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.338438988 CET	33966	48694	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.338654041 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.338727951 CET	48694	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.355894089 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.361403942 CET	33966	48696	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.361463070 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.362147093 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.367377043 CET	33966	48696	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.367424965 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.372586012 CET	33966	48696	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.985847950 CET	33966	48696	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:58.986008883 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:58.986041069 CET	48696	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.002727032 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.007906914 CET	33966	48698	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.007987022 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.009351015 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.014164925 CET	33966	48698	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.014256954 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.019113064 CET	33966	48698	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.650757074 CET	33966	48698	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.651118040 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.651118040 CET	48698	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.666654110 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.671534061 CET	33966	48700	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.671597958 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.672332048 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.677150011 CET	33966	48700	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.677208900 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:51:59.682025909 CET	33966	48700	178.215.238.48	192.168.2.23
Jan 15, 2025 14:51:59.969465971 CET	42516	80	192.168.2.23	109.202.202.202
Jan 15, 2025 14:52:00.313899040 CET	33966	48700	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.314074039 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.314074993 CET	48700	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.331032038 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.335901976 CET	33966	48702	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.336005926 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.337281942 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.342183113 CET	33966	48702	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.342279911 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.347153902 CET	33966	48702	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.971913099 CET	33966	48702	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.972110033 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.972174883 CET	48702	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.989154100 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.994012117 CET	33966	48704	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.994142056 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.995028973 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:00.999847889 CET	33966	48704	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:00.999923944 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.005371094 CET	33966	48704	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:01.617523909 CET	33966	48704	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:01.617769957 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.617769957 CET	48704	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.640633106 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.645440102 CET	33966	48706	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:01.645510912 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.646838903 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.651626110 CET	33966	48706	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:01.651694059 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:01.656474113 CET	33966	48706	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.300873995 CET	33966	48706	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.301083088 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.301225901 CET	48706	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.317195892 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.322068930 CET	33966	48708	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.322185040 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.322827101 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.327656984 CET	33966	48708	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.327744961 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.332583904 CET	33966	48708	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.948980093 CET	33966	48708	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.949173927 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.949333906 CET	48708	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.965970039 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.970824003 CET	33966	48710	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.970911980 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.971992016 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.976774931 CET	33966	48710	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:02.976846933 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:02.981764078 CET	33966	48710	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:03.604367971 CET	33966	48710	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:03.604707956 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.604840040 CET	48710	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.620554924 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.625716925 CET	33966	48712	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:03.625796080 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.626638889 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.631395102 CET	33966	48712	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:03.631469011 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:03.636215925 CET	33966	48712	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.249397993 CET	33966	48712	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.249705076 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.249851942 CET	48712	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.265924931 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.270771980 CET	33966	48714	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.270857096 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.271881104 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.276654959 CET	33966	48714	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.276727915 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.281503916 CET	33966	48714	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.898596048 CET	33966	48714	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.898766994 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.898808002 CET	48714	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.921577930 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.931385040 CET	33966	48716	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.931478024 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.932070017 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.937680006 CET	33966	48716	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:04.937752008 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:04.943578005 CET	33966	48716	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:05.589776993 CET	33966	48716	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:05.589981079 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.590037107 CET	48716	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.605221987 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.610089064 CET	33966	48718	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:05.610203981 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.610816956 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.615565062 CET	33966	48718	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:05.615657091 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:05.620398045 CET	33966	48718	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.238034010 CET	33966	48718	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.238507986 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.238507986 CET	48718	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.253711939 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.258506060 CET	33966	48720	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.258564949 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.259135962 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.263868093 CET	33966	48720	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.263916016 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.268686056 CET	33966	48720	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.891894102 CET	33966	48720	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.892025948 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.892076969 CET	48720	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.907982111 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.912753105 CET	33966	48722	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.912806988 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.913461924 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.918267965 CET	33966	48722	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:06.918313026 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:06.923058987 CET	33966	48722	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:07.541184902 CET	33966	48722	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:07.541377068 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.541475058 CET	48722	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.562167883 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.566963911 CET	33966	48724	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:07.567040920 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.567934990 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.572690964 CET	33966	48724	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:07.572751045 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:07.577492952 CET	33966	48724	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.207773924 CET	33966	48724	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.207926035 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.208002090 CET	48724	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.225464106 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.231740952 CET	33966	48726	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.231806040 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.232630014 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.238887072 CET	33966	48726	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.238945961 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.245212078 CET	33966	48726	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.855647087 CET	33966	48726	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.855787992 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.855808973 CET	48726	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.871680975 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.876569986 CET	33966	48728	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.876640081 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.877204895 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.881941080 CET	33966	48728	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:08.881990910 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:08.886869907 CET	33966	48728	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:09.500431061 CET	33966	48728	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:09.500683069 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.500684023 CET	48728	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.517863035 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.522761106 CET	33966	48730	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:09.522896051 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.523930073 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.528717995 CET	33966	48730	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:09.528788090 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:09.533588886 CET	33966	48730	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.181536913 CET	33966	48730	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.181828976 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.181828976 CET	48730	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.200489044 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.205399990 CET	33966	48732	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.205461025 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.206062078 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.210933924 CET	33966	48732	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.210990906 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.215822935 CET	33966	48732	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.828895092 CET	33966	48732	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.829045057 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.829045057 CET	48732	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.844882011 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.849699020 CET	33966	48734	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.849756956 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.850424051 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.855196953 CET	33966	48734	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:10.855279922 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:10.860059023 CET	33966	48734	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.486726999 CET	33966	48734	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.486969948 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.486970901 CET	48734	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.503295898 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.508203983 CET	33966	48736	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.508326054 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.508979082 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.513843060 CET	33966	48736	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.513995886 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.518834114 CET	33966	48736	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.823741913 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:11.871747971 CET	33966	48736	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.968699932 CET	33966	48736	178.215.238.48	192.168.2.23
Jan 15, 2025 14:52:11.968892097 CET	48736	33966	192.168.2.23	178.215.238.48
Jan 15, 2025 14:52:24.542089939 CET	43928	443	192.168.2.23	91.189.91.42
Jan 15, 2025 14:52:45.019371033 CET	42836	443	192.168.2.23	91.189.91.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 14:51:26.838300943 CET	44935	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:26.845371008 CET	53	44935	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:26.846218109 CET	53861	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:26.852828026 CET	53	53861	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:27.492635012 CET	40595	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:27.499684095 CET	53	40595	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:27.500504971 CET	32985	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:27.507307053 CET	53	32985	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:28.156183004 CET	39251	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:28.163460016 CET	53	39251	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:28.164463997 CET	45469	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:28.176809072 CET	53	45469	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:28.809562922 CET	39818	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:28.817318916 CET	53	39818	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:28.818419933 CET	56034	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:28.825329065 CET	53	56034	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:29.484582901 CET	35595	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:29.491630077 CET	53	35595	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:29.492875099 CET	41630	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:29.499747992 CET	53	41630	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:30.142148018 CET	60815	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:30.149352074 CET	53	60815	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:30.150089979 CET	43221	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:30.159945011 CET	53	43221	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:30.801593065 CET	51390	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:30.808545113 CET	53	51390	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:30.809179068 CET	44478	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:30.816082954 CET	53	44478	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:31.445775986 CET	48168	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:31.452460051 CET	53	48168	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:31.453108072 CET	33466	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:31.460033894 CET	53	33466	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:32.122330904 CET	53267	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:32.129312992 CET	53	53267	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:32.130815983 CET	49491	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:32.138308048 CET	53	49491	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:32.770116091 CET	50543	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:32.776904106 CET	53	50543	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:32.777580976 CET	52995	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:32.784478903 CET	53	52995	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:33.423248053 CET	56630	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:33.430063009 CET	53	56630	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:33.430715084 CET	40009	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:33.438354015 CET	53	40009	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:34.068053961 CET	42486	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:34.075021982 CET	53	42486	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:34.075952053 CET	51513	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:34.082412958 CET	53	51513	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:34.723011971 CET	39132	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:34.729826927 CET	53	39132	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:34.730560064 CET	34339	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:34.737333059 CET	53	34339	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:35.370796919 CET	47071	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:35.377666950 CET	53	47071	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:35.378321886 CET	41338	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:35.384965897 CET	53	41338	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:36.038713932 CET	36475	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:36.045906067 CET	53	36475	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:36.046683073 CET	36300	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:36.053632975 CET	53	36300	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:36.703128099 CET	46457	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:36.709480047 CET	53	46457	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:36.710143089 CET	50551	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:36.716592073 CET	53	50551	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:37.358910084 CET	44203	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:37.365871906 CET	53	44203	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:37.366507053 CET	37872	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:37.373245955 CET	53	37872	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:38.003827095 CET	38113	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:38.010140896 CET	53	38113	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:38.011262894 CET	47334	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:38.017776012 CET	53	47334	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:38.653251886 CET	52523	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:38.660293102 CET	53	52523	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:38.661839962 CET	32972	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:38.668916941 CET	53	32972	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:39.303256989 CET	48744	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:39.310117960 CET	53	48744	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:39.311449051 CET	50499	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:39.317924023 CET	53	50499	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:39.949722052 CET	38764	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:39.956449986 CET	53	38764	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:39.957580090 CET	49632	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:39.964184046 CET	53	49632	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:40.599760056 CET	45288	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:40.606007099 CET	53	45288	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:40.607112885 CET	43458	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:40.614264965 CET	53	43458	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:41.243808031 CET	38199	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:41.250730991 CET	53	38199	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:41.252253056 CET	39420	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:41.259011984 CET	53	39420	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:41.890378952 CET	55960	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:41.897414923 CET	53	55960	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:41.898108006 CET	48190	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:41.905200005 CET	53	48190	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:42.557519913 CET	38793	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:42.564851046 CET	53	38793	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:42.566236973 CET	57134	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:42.572953939 CET	53	57134	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:43.212184906 CET	58384	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:43.218612909 CET	53	58384	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:43.219722986 CET	58490	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:43.226104021 CET	53	58490	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:43.885680914 CET	41774	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:43.892745018 CET	53	41774	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:43.893889904 CET	46067	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:43.900950909 CET	53	46067	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:44.545789957 CET	40295	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:44.552485943 CET	53	40295	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:44.553209066 CET	49009	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:44.560343981 CET	53	49009	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:45.237750053 CET	45371	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:45.244628906 CET	53	45371	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:45.246006966 CET	49320	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:45.252268076 CET	53	49320	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:45.883254051 CET	44751	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:45.889482975 CET	53	44751	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:45.890660048 CET	56424	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:45.897555113 CET	53	56424	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:46.539747000 CET	38354	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:46.547880888 CET	53	38354	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:46.549001932 CET	32832	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:46.557394981 CET	53	32832	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:47.205698013 CET	35800	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:47.212584019 CET	53	35800	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:47.214358091 CET	45231	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:47.221466064 CET	53	45231	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:47.853836060 CET	34095	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:47.860734940 CET	53	34095	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:47.862256050 CET	46735	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:47.869328976 CET	53	46735	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:48.521249056 CET	41727	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:48.529081106 CET	53	41727	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:48.530729055 CET	50874	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:48.537081957 CET	53	50874	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:49.168864965 CET	48731	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:49.175637007 CET	53	48731	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:49.177109957 CET	40098	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:49.183854103 CET	53	40098	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:49.814913034 CET	57500	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:49.822071075 CET	53	57500	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:49.823071957 CET	47478	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:49.829318047 CET	53	47478	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:50.464514971 CET	57360	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:50.470798016 CET	53	57360	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:50.471990108 CET	38622	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:50.478980064 CET	53	38622	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:51.129441023 CET	39842	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:51.136555910 CET	53	39842	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:51.138001919 CET	40232	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:51.144829988 CET	53	40232	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:51.778918028 CET	57217	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:51.785923958 CET	53	57217	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:51.786809921 CET	34213	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:51.793530941 CET	53	34213	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:52.422307014 CET	58854	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:52.429246902 CET	53	58854	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:52.430691957 CET	44597	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:52.437563896 CET	53	44597	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:53.097628117 CET	47353	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:53.104100943 CET	53	47353	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:53.105308056 CET	58265	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:53.112178087 CET	53	58265	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:53.772551060 CET	45905	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:53.779046059 CET	53	45905	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:53.780391932 CET	36120	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:53.786988020 CET	53	36120	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:54.415004015 CET	48869	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:54.421875954 CET	53	48869	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:54.422821045 CET	50555	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:54.429640055 CET	53	50555	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:55.079797029 CET	55297	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:55.087891102 CET	53	55297	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:55.089003086 CET	56140	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:55.095865011 CET	53	56140	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:55.748620987 CET	34324	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:55.755441904 CET	53	34324	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:55.757015944 CET	59740	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:55.763154030 CET	53	59740	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:56.409388065 CET	33876	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:56.415761948 CET	53	33876	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:56.416893005 CET	59260	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:56.423499107 CET	53	59260	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:57.050612926 CET	60914	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:57.057431936 CET	53	60914	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:57.058873892 CET	48212	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:57.065170050 CET	53	48212	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:57.695791006 CET	59718	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:57.702280045 CET	53	59718	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:57.703020096 CET	44384	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:57.709445000 CET	53	44384	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:58.340540886 CET	54169	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:58.346987009 CET	53	54169	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:58.348242044 CET	42828	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:58.355334997 CET	53	42828	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:58.987322092 CET	45835	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:58.993946075 CET	53	45835	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:58.995452881 CET	41548	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:59.002027988 CET	53	41548	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:59.652301073 CET	42798	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:59.658808947 CET	53	42798	8.8.8.8	192.168.2.23
Jan 15, 2025 14:51:59.659985065 CET	50840	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:51:59.666162014 CET	53	50840	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:00.315351009 CET	35859	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:00.322557926 CET	53	35859	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:00.324040890 CET	41720	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:00.330348015 CET	53	41720	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:00.973958015 CET	34921	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:00.980307102 CET	53	34921	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:00.981818914 CET	34419	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:00.988518000 CET	53	34419	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:01.619591951 CET	41249	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:01.626524925 CET	53	41249	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:01.627968073 CET	33361	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:01.634855032 CET	53	33361	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:02.302340984 CET	44591	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:02.309410095 CET	53	44591	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:02.310220003 CET	48624	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:02.316548109 CET	53	48624	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:02.950603008 CET	33058	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:02.957488060 CET	53	33058	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:02.958892107 CET	42205	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:02.965404987 CET	53	42205	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:03.606137037 CET	42713	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:03.612833023 CET	53	42713	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:03.613619089 CET	57574	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:03.619945049 CET	53	57574	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:04.251152039 CET	46788	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:04.257920027 CET	53	46788	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:04.259025097 CET	56692	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:04.265399933 CET	53	56692	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:04.899597883 CET	37128	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:04.910265923 CET	53	37128	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:04.910964966 CET	39502	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:04.921221972 CET	53	39502	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:05.590857029 CET	46612	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:05.597405910 CET	53	46612	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:05.598095894 CET	56479	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:05.604840040 CET	53	56479	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:06.239383936 CET	48465	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:06.246295929 CET	53	48465	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:06.246978998 CET	51872	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:06.253278971 CET	53	51872	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:06.892985106 CET	53687	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:06.899825096 CET	53	53687	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:06.900638103 CET	36645	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:06.907598019 CET	53	36645	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:07.543021917 CET	45772	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:07.550560951 CET	53	45772	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:07.551753998 CET	50946	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:07.558034897 CET	53	50946	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:08.209058046 CET	35672	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:08.216934919 CET	53	35672	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:08.217873096 CET	55612	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:08.224872112 CET	53	55612	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:08.856794119 CET	59196	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:08.863599062 CET	53	59196	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:08.864500999 CET	55850	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:08.871325970 CET	53	55850	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:09.501354933 CET	46038	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:09.508878946 CET	53	46038	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:09.510103941 CET	38997	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:09.517177105 CET	53	38997	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:10.182758093 CET	47217	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:10.190300941 CET	53	47217	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:10.191222906 CET	53277	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:10.199959993 CET	53	53277	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:10.830069065 CET	44188	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:10.836203098 CET	53	44188	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:10.837043047 CET	55429	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:10.844525099 CET	53	55429	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:11.487998962 CET	58104	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:11.495239019 CET	53	58104	8.8.8.8	192.168.2.23
Jan 15, 2025 14:52:11.496339083 CET	58666	53	192.168.2.23	8.8.8.8
Jan 15, 2025 14:52:11.502717972 CET	53	58666	8.8.8.8	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 14:51:26.838300943 CET	192.168.2.23	8.8.8.8	0x797a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:26.846218109 CET	192.168.2.23	8.8.8.8	0xd104	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:27.492635012 CET	192.168.2.23	8.8.8.8	0x11df	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:27.500504971 CET	192.168.2.23	8.8.8.8	0x7014	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.156183004 CET	192.168.2.23	8.8.8.8	0xaf39	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.164463997 CET	192.168.2.23	8.8.8.8	0xd823	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.809562922 CET	192.168.2.23	8.8.8.8	0x49b9	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.818419933 CET	192.168.2.23	8.8.8.8	0xe1ee	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:29.484582901 CET	192.168.2.23	8.8.8.8	0xd651	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:29.492875099 CET	192.168.2.23	8.8.8.8	0xaf94	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.142148018 CET	192.168.2.23	8.8.8.8	0x4988	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.150089979 CET	192.168.2.23	8.8.8.8	0xab86	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.801593065 CET	192.168.2.23	8.8.8.8	0x5787	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.809179068 CET	192.168.2.23	8.8.8.8	0xac43	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:31.445775986 CET	192.168.2.23	8.8.8.8	0xdeb9	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:31.453108072 CET	192.168.2.23	8.8.8.8	0xe2cd	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.122330904 CET	192.168.2.23	8.8.8.8	0xbbeb	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.130815983 CET	192.168.2.23	8.8.8.8	0x7b88	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.770116091 CET	192.168.2.23	8.8.8.8	0xf3a0	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.777580976 CET	192.168.2.23	8.8.8.8	0x2075	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:33.423248053 CET	192.168.2.23	8.8.8.8	0xf93	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:33.430715084 CET	192.168.2.23	8.8.8.8	0x57f2	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.068053961 CET	192.168.2.23	8.8.8.8	0x683c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.075952053 CET	192.168.2.23	8.8.8.8	0x81d1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.723011971 CET	192.168.2.23	8.8.8.8	0x2ffb	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.730560064 CET	192.168.2.23	8.8.8.8	0x8bce	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:35.370796919 CET	192.168.2.23	8.8.8.8	0x98f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:35.378321886 CET	192.168.2.23	8.8.8.8	0xb947	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.038713932 CET	192.168.2.23	8.8.8.8	0x753a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.046683073 CET	192.168.2.23	8.8.8.8	0x7ed6	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.703128099 CET	192.168.2.23	8.8.8.8	0xb7d4	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.710143089 CET	192.168.2.23	8.8.8.8	0xadd5	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:37.358910084 CET	192.168.2.23	8.8.8.8	0xb1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:37.366507053 CET	192.168.2.23	8.8.8.8	0xbb18	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.003827095 CET	192.168.2.23	8.8.8.8	0xb6e2	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.011262894 CET	192.168.2.23	8.8.8.8	0x333b	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.653251886 CET	192.168.2.23	8.8.8.8	0xadbd	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.661839962 CET	192.168.2.23	8.8.8.8	0xee41	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.303256989 CET	192.168.2.23	8.8.8.8	0xb224	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.311449051 CET	192.168.2.23	8.8.8.8	0x94d8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.949722052 CET	192.168.2.23	8.8.8.8	0xf339	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.957580090 CET	192.168.2.23	8.8.8.8	0x4050	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:40.599760056 CET	192.168.2.23	8.8.8.8	0x4ff8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:40.607112885 CET	192.168.2.23	8.8.8.8	0xfb01	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.243808031 CET	192.168.2.23	8.8.8.8	0xcc69	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.252253056 CET	192.168.2.23	8.8.8.8	0x69d8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.890378952 CET	192.168.2.23	8.8.8.8	0xaa7f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.898108006 CET	192.168.2.23	8.8.8.8	0xa87d	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:42.557519913 CET	192.168.2.23	8.8.8.8	0x2601	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:42.566236973 CET	192.168.2.23	8.8.8.8	0x4425	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.212184906 CET	192.168.2.23	8.8.8.8	0x1c94	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.219722986 CET	192.168.2.23	8.8.8.8	0x194a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.885680914 CET	192.168.2.23	8.8.8.8	0xc128	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.893889904 CET	192.168.2.23	8.8.8.8	0x3eee	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:44.545789957 CET	192.168.2.23	8.8.8.8	0x2eec	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:44.553209066 CET	192.168.2.23	8.8.8.8	0xd249	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.237750053 CET	192.168.2.23	8.8.8.8	0x4178	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.246006966 CET	192.168.2.23	8.8.8.8	0x103e	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.883254051 CET	192.168.2.23	8.8.8.8	0xafe9	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.890660048 CET	192.168.2.23	8.8.8.8	0x8062	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:46.539747000 CET	192.168.2.23	8.8.8.8	0xb9ec	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:46.549001932 CET	192.168.2.23	8.8.8.8	0x4c56	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.205698013 CET	192.168.2.23	8.8.8.8	0xd08e	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.214358091 CET	192.168.2.23	8.8.8.8	0x23c1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.853836060 CET	192.168.2.23	8.8.8.8	0x571a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.862256050 CET	192.168.2.23	8.8.8.8	0x72bf	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:48.521249056 CET	192.168.2.23	8.8.8.8	0x20d	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:48.530729055 CET	192.168.2.23	8.8.8.8	0xb726	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.168864965 CET	192.168.2.23	8.8.8.8	0x4e79	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.177109957 CET	192.168.2.23	8.8.8.8	0x9def	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.814913034 CET	192.168.2.23	8.8.8.8	0xe4c2	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.823071957 CET	192.168.2.23	8.8.8.8	0xdeb1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:50.464514971 CET	192.168.2.23	8.8.8.8	0x141c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:50.471990108 CET	192.168.2.23	8.8.8.8	0x1b13	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.129441023 CET	192.168.2.23	8.8.8.8	0x8aab	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.138001919 CET	192.168.2.23	8.8.8.8	0x58ed	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.778918028 CET	192.168.2.23	8.8.8.8	0x2dd	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.786809921 CET	192.168.2.23	8.8.8.8	0x639c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:52.422307014 CET	192.168.2.23	8.8.8.8	0xa1be	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:52.430691957 CET	192.168.2.23	8.8.8.8	0x365a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.097628117 CET	192.168.2.23	8.8.8.8	0x3d04	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.105308056 CET	192.168.2.23	8.8.8.8	0x6931	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.772551060 CET	192.168.2.23	8.8.8.8	0xdd4	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.780391932 CET	192.168.2.23	8.8.8.8	0x1797	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:54.415004015 CET	192.168.2.23	8.8.8.8	0xfa52	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:54.422821045 CET	192.168.2.23	8.8.8.8	0xfde1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.079797029 CET	192.168.2.23	8.8.8.8	0x2bf6	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.089003086 CET	192.168.2.23	8.8.8.8	0x756d	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.748620987 CET	192.168.2.23	8.8.8.8	0x6270	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.757015944 CET	192.168.2.23	8.8.8.8	0xfd79	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:56.409388065 CET	192.168.2.23	8.8.8.8	0x3f86	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:56.416893005 CET	192.168.2.23	8.8.8.8	0x2a6a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.050612926 CET	192.168.2.23	8.8.8.8	0x77f5	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.058873892 CET	192.168.2.23	8.8.8.8	0x60d8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.695791006 CET	192.168.2.23	8.8.8.8	0x562b	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.703020096 CET	192.168.2.23	8.8.8.8	0x6db7	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.340540886 CET	192.168.2.23	8.8.8.8	0xf99	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.348242044 CET	192.168.2.23	8.8.8.8	0x7cd0	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.987322092 CET	192.168.2.23	8.8.8.8	0xb33b	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.995452881 CET	192.168.2.23	8.8.8.8	0xd873	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:59.652301073 CET	192.168.2.23	8.8.8.8	0x9b32	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:59.659985065 CET	192.168.2.23	8.8.8.8	0x27e8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.315351009 CET	192.168.2.23	8.8.8.8	0xac2f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.324040890 CET	192.168.2.23	8.8.8.8	0xc483	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.973958015 CET	192.168.2.23	8.8.8.8	0xbccf	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.981818914 CET	192.168.2.23	8.8.8.8	0xe4a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:01.619591951 CET	192.168.2.23	8.8.8.8	0x62ba	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:01.627968073 CET	192.168.2.23	8.8.8.8	0x3dd2	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.302340984 CET	192.168.2.23	8.8.8.8	0xc83e	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.310220003 CET	192.168.2.23	8.8.8.8	0x5a4a	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.950603008 CET	192.168.2.23	8.8.8.8	0x9c37	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.958892107 CET	192.168.2.23	8.8.8.8	0x2d55	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:03.606137037 CET	192.168.2.23	8.8.8.8	0x6c98	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:03.613619089 CET	192.168.2.23	8.8.8.8	0x6b3d	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.251152039 CET	192.168.2.23	8.8.8.8	0x447c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.259025097 CET	192.168.2.23	8.8.8.8	0x37c1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.899597883 CET	192.168.2.23	8.8.8.8	0xf3b8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.910964966 CET	192.168.2.23	8.8.8.8	0x16b8	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:05.590857029 CET	192.168.2.23	8.8.8.8	0x40ee	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:05.598095894 CET	192.168.2.23	8.8.8.8	0x162	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.239383936 CET	192.168.2.23	8.8.8.8	0x8f40	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.246978998 CET	192.168.2.23	8.8.8.8	0xc6d7	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.892985106 CET	192.168.2.23	8.8.8.8	0xae50	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.900638103 CET	192.168.2.23	8.8.8.8	0x3a0c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:07.543021917 CET	192.168.2.23	8.8.8.8	0xec81	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:07.551753998 CET	192.168.2.23	8.8.8.8	0x449f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.209058046 CET	192.168.2.23	8.8.8.8	0xa46f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.217873096 CET	192.168.2.23	8.8.8.8	0xe1d5	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.856794119 CET	192.168.2.23	8.8.8.8	0x40cb	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.864500999 CET	192.168.2.23	8.8.8.8	0xa66e	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:09.501354933 CET	192.168.2.23	8.8.8.8	0xf652	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:09.510103941 CET	192.168.2.23	8.8.8.8	0xb141	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.182758093 CET	192.168.2.23	8.8.8.8	0x4bd	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.191222906 CET	192.168.2.23	8.8.8.8	0xf28c	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.830069065 CET	192.168.2.23	8.8.8.8	0xf545	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.837043047 CET	192.168.2.23	8.8.8.8	0x467f	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:11.487998962 CET	192.168.2.23	8.8.8.8	0x3598	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:11.496339083 CET	192.168.2.23	8.8.8.8	0xf6a1	Standard query (0)	ofewu.eye-network.ru	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 14:51:26.845371008 CET	8.8.8.8	192.168.2.23	0x797a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:26.852828026 CET	8.8.8.8	192.168.2.23	0xd104	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:27.499684095 CET	8.8.8.8	192.168.2.23	0x11df	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:27.507307053 CET	8.8.8.8	192.168.2.23	0x7014	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.163460016 CET	8.8.8.8	192.168.2.23	0xaf39	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.176809072 CET	8.8.8.8	192.168.2.23	0xd823	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.817318916 CET	8.8.8.8	192.168.2.23	0x49b9	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:28.825329065 CET	8.8.8.8	192.168.2.23	0xe1ee	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:29.491630077 CET	8.8.8.8	192.168.2.23	0xd651	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:29.499747992 CET	8.8.8.8	192.168.2.23	0xaf94	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.149352074 CET	8.8.8.8	192.168.2.23	0x4988	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.159945011 CET	8.8.8.8	192.168.2.23	0xab86	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.808545113 CET	8.8.8.8	192.168.2.23	0x5787	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:30.816082954 CET	8.8.8.8	192.168.2.23	0xac43	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:31.452460051 CET	8.8.8.8	192.168.2.23	0xdeb9	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:31.460033894 CET	8.8.8.8	192.168.2.23	0xe2cd	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.129312992 CET	8.8.8.8	192.168.2.23	0xbbeb	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.138308048 CET	8.8.8.8	192.168.2.23	0x7b88	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.776904106 CET	8.8.8.8	192.168.2.23	0xf3a0	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:32.784478903 CET	8.8.8.8	192.168.2.23	0x2075	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:33.430063009 CET	8.8.8.8	192.168.2.23	0xf93	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:33.438354015 CET	8.8.8.8	192.168.2.23	0x57f2	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.075021982 CET	8.8.8.8	192.168.2.23	0x683c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.082412958 CET	8.8.8.8	192.168.2.23	0x81d1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.729826927 CET	8.8.8.8	192.168.2.23	0x2ffb	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:34.737333059 CET	8.8.8.8	192.168.2.23	0x8bce	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:35.377666950 CET	8.8.8.8	192.168.2.23	0x98f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:35.384965897 CET	8.8.8.8	192.168.2.23	0xb947	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.045906067 CET	8.8.8.8	192.168.2.23	0x753a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.053632975 CET	8.8.8.8	192.168.2.23	0x7ed6	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.709480047 CET	8.8.8.8	192.168.2.23	0xb7d4	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:36.716592073 CET	8.8.8.8	192.168.2.23	0xadd5	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:37.365871906 CET	8.8.8.8	192.168.2.23	0xb1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:37.373245955 CET	8.8.8.8	192.168.2.23	0xbb18	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.010140896 CET	8.8.8.8	192.168.2.23	0xb6e2	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.017776012 CET	8.8.8.8	192.168.2.23	0x333b	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.660293102 CET	8.8.8.8	192.168.2.23	0xadbd	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:38.668916941 CET	8.8.8.8	192.168.2.23	0xee41	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.310117960 CET	8.8.8.8	192.168.2.23	0xb224	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.317924023 CET	8.8.8.8	192.168.2.23	0x94d8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.956449986 CET	8.8.8.8	192.168.2.23	0xf339	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:39.964184046 CET	8.8.8.8	192.168.2.23	0x4050	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:40.606007099 CET	8.8.8.8	192.168.2.23	0x4ff8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:40.614264965 CET	8.8.8.8	192.168.2.23	0xfb01	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.250730991 CET	8.8.8.8	192.168.2.23	0xcc69	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.259011984 CET	8.8.8.8	192.168.2.23	0x69d8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.897414923 CET	8.8.8.8	192.168.2.23	0xaa7f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:41.905200005 CET	8.8.8.8	192.168.2.23	0xa87d	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:42.564851046 CET	8.8.8.8	192.168.2.23	0x2601	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:42.572953939 CET	8.8.8.8	192.168.2.23	0x4425	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.218612909 CET	8.8.8.8	192.168.2.23	0x1c94	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.226104021 CET	8.8.8.8	192.168.2.23	0x194a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.892745018 CET	8.8.8.8	192.168.2.23	0xc128	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:43.900950909 CET	8.8.8.8	192.168.2.23	0x3eee	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:44.552485943 CET	8.8.8.8	192.168.2.23	0x2eec	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:44.560343981 CET	8.8.8.8	192.168.2.23	0xd249	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.244628906 CET	8.8.8.8	192.168.2.23	0x4178	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.252268076 CET	8.8.8.8	192.168.2.23	0x103e	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.889482975 CET	8.8.8.8	192.168.2.23	0xafe9	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:45.897555113 CET	8.8.8.8	192.168.2.23	0x8062	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:46.547880888 CET	8.8.8.8	192.168.2.23	0xb9ec	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:46.557394981 CET	8.8.8.8	192.168.2.23	0x4c56	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.212584019 CET	8.8.8.8	192.168.2.23	0xd08e	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.221466064 CET	8.8.8.8	192.168.2.23	0x23c1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.860734940 CET	8.8.8.8	192.168.2.23	0x571a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:47.869328976 CET	8.8.8.8	192.168.2.23	0x72bf	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:48.529081106 CET	8.8.8.8	192.168.2.23	0x20d	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:48.537081957 CET	8.8.8.8	192.168.2.23	0xb726	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.175637007 CET	8.8.8.8	192.168.2.23	0x4e79	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.183854103 CET	8.8.8.8	192.168.2.23	0x9def	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.822071075 CET	8.8.8.8	192.168.2.23	0xe4c2	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:49.829318047 CET	8.8.8.8	192.168.2.23	0xdeb1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:50.470798016 CET	8.8.8.8	192.168.2.23	0x141c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:50.478980064 CET	8.8.8.8	192.168.2.23	0x1b13	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.136555910 CET	8.8.8.8	192.168.2.23	0x8aab	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.144829988 CET	8.8.8.8	192.168.2.23	0x58ed	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.785923958 CET	8.8.8.8	192.168.2.23	0x2dd	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:51.793530941 CET	8.8.8.8	192.168.2.23	0x639c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:52.429246902 CET	8.8.8.8	192.168.2.23	0xa1be	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:52.437563896 CET	8.8.8.8	192.168.2.23	0x365a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.104100943 CET	8.8.8.8	192.168.2.23	0x3d04	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.112178087 CET	8.8.8.8	192.168.2.23	0x6931	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.779046059 CET	8.8.8.8	192.168.2.23	0xdd4	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:53.786988020 CET	8.8.8.8	192.168.2.23	0x1797	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:54.421875954 CET	8.8.8.8	192.168.2.23	0xfa52	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:54.429640055 CET	8.8.8.8	192.168.2.23	0xfde1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.087891102 CET	8.8.8.8	192.168.2.23	0x2bf6	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.095865011 CET	8.8.8.8	192.168.2.23	0x756d	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.755441904 CET	8.8.8.8	192.168.2.23	0x6270	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:55.763154030 CET	8.8.8.8	192.168.2.23	0xfd79	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:56.415761948 CET	8.8.8.8	192.168.2.23	0x3f86	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:56.423499107 CET	8.8.8.8	192.168.2.23	0x2a6a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.057431936 CET	8.8.8.8	192.168.2.23	0x77f5	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.065170050 CET	8.8.8.8	192.168.2.23	0x60d8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.702280045 CET	8.8.8.8	192.168.2.23	0x562b	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:57.709445000 CET	8.8.8.8	192.168.2.23	0x6db7	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.346987009 CET	8.8.8.8	192.168.2.23	0xf99	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.355334997 CET	8.8.8.8	192.168.2.23	0x7cd0	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:58.993946075 CET	8.8.8.8	192.168.2.23	0xb33b	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:59.002027988 CET	8.8.8.8	192.168.2.23	0xd873	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:59.658808947 CET	8.8.8.8	192.168.2.23	0x9b32	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:51:59.666162014 CET	8.8.8.8	192.168.2.23	0x27e8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.322557926 CET	8.8.8.8	192.168.2.23	0xac2f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.330348015 CET	8.8.8.8	192.168.2.23	0xc483	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.980307102 CET	8.8.8.8	192.168.2.23	0xbccf	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:00.988518000 CET	8.8.8.8	192.168.2.23	0xe4a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:01.626524925 CET	8.8.8.8	192.168.2.23	0x62ba	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:01.634855032 CET	8.8.8.8	192.168.2.23	0x3dd2	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.309410095 CET	8.8.8.8	192.168.2.23	0xc83e	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.316548109 CET	8.8.8.8	192.168.2.23	0x5a4a	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.957488060 CET	8.8.8.8	192.168.2.23	0x9c37	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:02.965404987 CET	8.8.8.8	192.168.2.23	0x2d55	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:03.612833023 CET	8.8.8.8	192.168.2.23	0x6c98	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:03.619945049 CET	8.8.8.8	192.168.2.23	0x6b3d	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.257920027 CET	8.8.8.8	192.168.2.23	0x447c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.265399933 CET	8.8.8.8	192.168.2.23	0x37c1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.910265923 CET	8.8.8.8	192.168.2.23	0xf3b8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:04.921221972 CET	8.8.8.8	192.168.2.23	0x16b8	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:05.597405910 CET	8.8.8.8	192.168.2.23	0x40ee	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:05.604840040 CET	8.8.8.8	192.168.2.23	0x162	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.246295929 CET	8.8.8.8	192.168.2.23	0x8f40	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.253278971 CET	8.8.8.8	192.168.2.23	0xc6d7	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.899825096 CET	8.8.8.8	192.168.2.23	0xae50	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:06.907598019 CET	8.8.8.8	192.168.2.23	0x3a0c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:07.550560951 CET	8.8.8.8	192.168.2.23	0xec81	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:07.558034897 CET	8.8.8.8	192.168.2.23	0x449f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.216934919 CET	8.8.8.8	192.168.2.23	0xa46f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.224872112 CET	8.8.8.8	192.168.2.23	0xe1d5	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.863599062 CET	8.8.8.8	192.168.2.23	0x40cb	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:08.871325970 CET	8.8.8.8	192.168.2.23	0xa66e	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:09.508878946 CET	8.8.8.8	192.168.2.23	0xf652	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:09.517177105 CET	8.8.8.8	192.168.2.23	0xb141	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.190300941 CET	8.8.8.8	192.168.2.23	0x4bd	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.199959993 CET	8.8.8.8	192.168.2.23	0xf28c	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.836203098 CET	8.8.8.8	192.168.2.23	0xf545	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:10.844525099 CET	8.8.8.8	192.168.2.23	0x467f	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:11.495239019 CET	8.8.8.8	192.168.2.23	0x3598	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 14:52:11.502717972 CET	8.8.8.8	192.168.2.23	0xf6a1	No error (0)	ofewu.eye-network.ru	178.215.238.48	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: Aqua.dbg.elf PID: 6235, Parent PID: 6154

General

Start time (UTC):	13:51:26
Start date (UTC):	15/01/2025
Path:	/tmp/Aqua.dbg.elf
Arguments:	/tmp/Aqua.dbg.elf
File size:	143336 bytes
MD5 hash:	10ac916c0e84105b1467a08e34c21b9f

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.dbg.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: Aqua.dbg.elf PID: 6235, Parent PID: 6154

General

Chronological Activities

Linux Analysis Report
Aqua.dbg.elf