Windows
Analysis Report
http://ipfs.io/ipfs/bafkreia4rvrau3sg2endwxiusyj4mhijld5nq3axj2plzu6pgpspvfhxn4
Overview
General Information
Detection
Score: | 52 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 6420 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 2124 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2024 --fi eld-trial- handle=198 8,i,140940 3797310378 6662,30939 1047234177 7868,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 4564 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://ipfs.i o/ipfs/baf kreia4rvra u3sg2endwx iusyj4mhij ld5nq3axj2 plzu6pgpsp vfhxn4" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | File created: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: |
Source: | Window detected: |
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | 1 Drive-by Compromise | Windows Management Instrumentation | 1 Registry Run Keys / Startup Folder | 1 Process Injection | 1 Masquerading | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 Registry Run Keys / Startup Folder | 1 Process Injection | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
code.jquery.com | 151.101.2.137 | true | false | high | |
www.google.com | 142.250.184.228 | true | false | high | |
fac.corp.fortinet.com | 208.91.114.103 | true | false | unknown | |
d28h3jm4r3crf8.cloudfront.net | 65.9.66.13 | true | false | unknown | |
ipfs.io | 209.94.90.1 | true | false | high | |
alphatrade-options.com | unknown | unknown | false | high | |
ik.imagekit.io | unknown | unknown | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false | high | ||
false |
| unknown | |
false | high | ||
false | high |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
151.101.2.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
65.9.66.52 | unknown | United States | 16509 | AMAZON-02US | false | |
208.91.114.103 | fac.corp.fortinet.com | United States | 40934 | FORTINETUS | false | |
142.250.184.228 | www.google.com | United States | 15169 | GOOGLEUS | false | |
209.94.90.1 | ipfs.io | United States | 40680 | PROTOCOLUS | false | |
65.9.66.13 | d28h3jm4r3crf8.cloudfront.net | United States | 16509 | AMAZON-02US | false |
IP |
---|
192.168.2.6 |
192.168.2.5 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1592341 |
Start date and time: | 2025-01-16 01:20:51 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 3m 2s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | http://ipfs.io/ipfs/bafkreia4rvrau3sg2endwxiusyj4mhijld5nq3axj2plzu6pgpspvfhxn4 |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 7 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal52.phis.win@18/15@17/9 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.74.206, 64.233.167.84, 142.250.186.78, 172.217.18.110, 142.250.184.238, 142.250.185.170, 142.250.186.170, 142.250.185.234, 216.58.206.74, 142.250.74.202, 172.217.18.106, 142.250.185.138, 142.250.185.74, 142.250.186.106, 142.250.186.42, 142.250.184.234, 172.217.16.202, 142.250.186.74, 216.58.212.138, 142.250.185.202, 142.250.181.234, 2.22.50.144, 2.23.77.188, 172.217.18.14, 142.250.186.46, 142.250.185.206, 142.250.184.206, 142.250.185.131, 142.250.181.238, 184.28.90.27, 172.202.163.200, 13.107.246.45
- Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: http://ipfs.io/ipfs/bafkreia4rvrau3sg2endwxiusyj4mhijld5nq3axj2plzu6pgpspvfhxn4
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2677 |
Entropy (8bit): | 3.978802545756266 |
Encrypted: | false |
SSDEEP: | 48:8ddgTE9+hHRBidAKZdA19ehwiZUklqeh1y+3:8QE+fDmy |
MD5: | 2039EF933541C50E9151E8F5A92BCBF7 |
SHA1: | 8C671CE94D15CA4F3AFAA31AF312A87ACCC69D75 |
SHA-256: | 47DF180CA1906CFF46A1EA7133FE9425F5B49184BC86520577AB0F4CAD866733 |
SHA-512: | 316A8945A6FB4FEA991FDA7DF34977D459DF3E4D677AAB58ACB34EA3329F941AB3001E9CB8B10ED0FB9C2F27A7DDABD2B98515B6CCD5E58CF05EFC8D649813F0 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2679 |
Entropy (8bit): | 3.993757326512109 |
Encrypted: | false |
SSDEEP: | 48:8adgTE9+hHRBidAKZdA1weh/iZUkAQkqehWy+2:81E+fx9QLy |
MD5: | 1F45F9E906B4F922C6668A4CF55EEA68 |
SHA1: | 0188591B16430B8C3A471106101DFC8E66A520FB |
SHA-256: | AA13F4EAE533082532CFC961C155DB6E3AA4BC9B8B661EE9472C8E226ADEA16E |
SHA-512: | 26D8DF263604B543829F7CF1D1DA7427E3A9694299086984B34EB1B20341651FB3AB58B7EB2F33B6C11A903EC52907A1E9EF2D253B98248F69D4DE8004DD40FA |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2693 |
Entropy (8bit): | 4.007161532380285 |
Encrypted: | false |
SSDEEP: | 48:8xBdgTE9+sHRBidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xsE+cBnqy |
MD5: | B01FAE4360E4C24740D20455FAB48968 |
SHA1: | F5096C60B0213EA9AF4CEFA93D3ABE3785709122 |
SHA-256: | 960FD5BAF941A4D2781E308CB85CF396993D70F5B3A471D345D21854E668FD68 |
SHA-512: | 4C4FE62E371C10E61C8A0F058C50ED5A66E2D3CB892731520D8A8A878DBB0FDC74AD161B007E070F5130B797D5D98E5AB865279857F5CF657C2C1BDC09373C93 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.991890706523154 |
Encrypted: | false |
SSDEEP: | 48:8QdgTE9+hHRBidAKZdA1vehDiZUkwqehCy+R:87E+fy8y |
MD5: | 80B2F5CFC46E9E4ADD48AF0C8D05B969 |
SHA1: | 7E97CF6DC65718F212C56D732BF12275512A39A4 |
SHA-256: | 99EDCCFC8C4D2D31F1EB0CD817D65BB591494EADFCF015278D29E20611BFB794 |
SHA-512: | 380EFDAD5EE0EE4A7B5BFA6F5EAC52C906ADF379BC17096D136E732B5BBACC28ECF584F40D9DAA5B2C01018F4F0BE0F93E393B8D70D0EB8C5777AF11D49C55AA |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.983031661274014 |
Encrypted: | false |
SSDEEP: | 48:8PdgTE9+hHRBidAKZdA1hehBiZUk1W1qehIy+C:86E+fC9oy |
MD5: | 8DF3BB6FA1B79F34DEC4658F6E9A53F8 |
SHA1: | C764F918FD37BBADAA0FA1F8FDFDEA987C32A8C8 |
SHA-256: | 2D00E1CF975E185F2084E3E2C27AC5849ECBBC4A01C0DC6F5003245A518E0B1E |
SHA-512: | 8E84AADF8A09E05B5F203A84D9703A2C0AC37A816CF7913E2EFFA862551D10B8F4A4E92BEF472AB038CCC23BC74D5BDA5D259C8B56D0A7C38BE950C0949EB9F7 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2683 |
Entropy (8bit): | 3.9928747946670713 |
Encrypted: | false |
SSDEEP: | 48:8ldgTE9+hHRBidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqy+yT+:84E+f8T/TbxWOvTbqy7T |
MD5: | A91D43A41891B717EBB34C94A04F4758 |
SHA1: | D0F7266D53574D4DC3D268095E4AA5533E1C9782 |
SHA-256: | C203572019DEAD9575D47AC79390D7EBE06D5B5A6167E6832BC81E7BCCCD7D91 |
SHA-512: | CA9AE22B2949F53D17C955DEE08E965B8E10DDC4EF0A5709ED9FBB613A83295A2CF836804D7AB64214C8EC147A501E65169F27E1022D2FA73258607FEB328463 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 55202 |
Entropy (8bit): | 7.826111557987171 |
Encrypted: | false |
SSDEEP: | 1536:WDc0CcT48aUauqkbuZr4/AxOjKWsftVDxLF:ZU4DUPiq/fupftt |
MD5: | D536D58EA2F4CFE5D5B734E7893FB09E |
SHA1: | 77C5E9FCBB33EB9B6DF808AA86F50E0542E5162F |
SHA-256: | 669C17CDE38DD0AB9673DE77A674C5B192E934399BBEE3EBED65BD70B05BFF5F |
SHA-512: | 69CE0DF240C3A0AE4ACFF39DE7B08AA9DF3BD288179FAAAC501F59496934C4245B35D888D2424ED66A2C187E65380AA1EF9FA059AC89BB9057C468F3F5CBBBB0 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 159340 |
Entropy (8bit): | 5.157176443825505 |
Encrypted: | false |
SSDEEP: | 3072:p8ygto9fDFVxwupNW2kJRCsZE6JtX6diUB9TNDyI6s:3gy9fDFVxwwN7kJRCsZE6JtX6diMTNWY |
MD5: | D2E88A9199C094A3F88EA9BDAE0E7DA4 |
SHA1: | 780DFB7FE6EB0A5097F82D6E2E0B676BC96C1DA5 |
SHA-256: | 1C8D620A6E46D11A3B5D149613C61D0958FAD86C174E9EBCD3CF33E4FA94F76F |
SHA-512: | 12A8828DF6B6850F48A8B0DE6C8504C7DF4E4BFB32EA61E74600AA091B5C6EEDCDC2A0F637D24D9725283602DADF6CFABEB7EBF6FFF191CAB833A93A738F7DFD |
Malicious: | false |
Reputation: | low |
URL: | https://ipfs.io/ipfs/bafkreia4rvrau3sg2endwxiusyj4mhijld5nq3axj2plzu6pgpspvfhxn4 |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 64894 |
Entropy (8bit): | 5.372381556245512 |
Encrypted: | false |
SSDEEP: | 1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2Bu:v4J+OlfOhWpO |
MD5: | 1F7D4A604162F7566C0E9F2B37667B5B |
SHA1: | 0E82F84676C524496D77F1F9E6A02A3BAF8D99CD |
SHA-256: | 5A48524CCFC6ECCD293217644CBCE9443F0B4A0EFCF6145E177D0219B90AE658 |
SHA-512: | 1007ABBD8B6711AFB48D3E9F4E2358A6DBDFDCF87B288AB19E8FE84981BC6DAA01CA4F426AB542B60B9A12D25CA35C37ED6445E77F25BB7712AA0D61602F59A2 |
Malicious: | false |
Reputation: | low |
URL: | https://code.jquery.com/jquery-2.2.4.min.js |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 16 |
Entropy (8bit): | 3.452819531114783 |
Encrypted: | false |
SSDEEP: | 3:HrRL:1L |
MD5: | 1E864FBFC865DB4414C7938AF8717484 |
SHA1: | F8BF8AC081AEC1C65D319CA5F7011A563DBA68BB |
SHA-256: | DD41A8261FB62B1852F6937368C64238FF2FEEFD0CB07567EB74A29004DA344A |
SHA-512: | 824D5EBC56C9E9DBC7B10BBC33D45BEE0640DEE1D3F16888ADD60E8F6B3BA62F961B0519ECEDFC7294A2B74B293728C24BD8B6EFD7D925509A2A6F770F26471A |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmOrPg53DWYGBIFDYbYYl4=?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 55202 |
Entropy (8bit): | 7.826111557987171 |
Encrypted: | false |
SSDEEP: | 1536:WDc0CcT48aUauqkbuZr4/AxOjKWsftVDxLF:ZU4DUPiq/fupftt |
MD5: | D536D58EA2F4CFE5D5B734E7893FB09E |
SHA1: | 77C5E9FCBB33EB9B6DF808AA86F50E0542E5162F |
SHA-256: | 669C17CDE38DD0AB9673DE77A674C5B192E934399BBEE3EBED65BD70B05BFF5F |
SHA-512: | 69CE0DF240C3A0AE4ACFF39DE7B08AA9DF3BD288179FAAAC501F59496934C4245B35D888D2424ED66A2C187E65380AA1EF9FA059AC89BB9057C468F3F5CBBBB0 |
Malicious: | false |
Reputation: | low |
URL: | https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 16, 2025 01:21:38.781784058 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:38.781788111 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:38.875518084 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:48.391475916 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:48.391650915 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:48.485219955 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:48.918809891 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:48.918905973 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:48.918987989 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:48.919172049 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:48.919203043 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.558491945 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.558784008 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:49.558824062 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.560302019 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.560364008 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:49.564515114 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:49.564609051 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.610146999 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:49.610161066 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:49.657020092 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:21:50.165256023 CET | 443 | 49703 | 23.1.237.91 | 192.168.2.5 |
Jan 16, 2025 01:21:50.165375948 CET | 49703 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:21:50.252464056 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.252543926 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.252621889 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.253061056 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.253098011 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.718672991 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.719146967 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.719216108 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.720102072 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.720175982 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.721065044 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.721129894 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.721194029 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.763328075 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.769043922 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.769108057 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.816255093 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.867269993 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867306948 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867333889 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867352009 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867367029 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.867373943 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867383003 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867393970 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.867413044 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867423058 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.867436886 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.867486954 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.867501974 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.868133068 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.868185997 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.868196964 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.908510923 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:50.908529043 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:50.908837080 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:50.909125090 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:50.909137011 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:50.920438051 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.920454025 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.925091982 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:50.925188065 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:50.925268888 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:50.925442934 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:50.925481081 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:50.937078953 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:50.937165022 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:50.937258005 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:50.937408924 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:50.937446117 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:50.955712080 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.955740929 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.955785036 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.955801964 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.955986023 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956005096 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956034899 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956034899 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.956053019 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956075907 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.956110954 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.956121922 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956834078 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956857920 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956886053 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956912041 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.956918955 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956928015 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.956933975 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.957379103 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.957392931 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.957756042 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.957778931 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.957802057 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.957811117 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.957822084 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.957848072 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.958504915 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.958534002 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.958559036 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:50.958564997 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.958573103 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.958632946 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.001100063 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.001169920 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.001184940 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044003010 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044043064 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044106960 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.044121027 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044229031 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.044269085 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044336081 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044395924 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.044408083 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044717073 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044773102 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.044784069 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.044837952 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.045205116 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045267105 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.045278072 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045418978 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.045691013 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045753002 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.045799971 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045861006 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.045866966 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045907021 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.045944929 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.046634912 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.046694994 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.046705961 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.046741962 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.046775103 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.046786070 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.046808004 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.047586918 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.047645092 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.047655106 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.047673941 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.047691107 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.047724962 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.047740936 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.047763109 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.048053026 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.048641920 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.048683882 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.048696995 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.048707962 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.048736095 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.048754930 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.092315912 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.092390060 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.134852886 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.134932041 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.134974957 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135027885 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135082006 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135109901 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135133028 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135135889 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135164976 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135195017 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135202885 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135202885 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135229111 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135235071 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135235071 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135250092 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135277987 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135287046 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135287046 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135302067 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135334969 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135349989 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135385990 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135399103 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135437012 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135452032 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135463953 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135484934 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135493040 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135530949 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.135544062 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.135593891 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.136307001 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.136363983 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.136374950 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.136394024 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.136445045 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.136636972 CET | 49714 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:21:51.136671066 CET | 443 | 49714 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.458528996 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.458831072 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.458842993 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.460490942 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.460562944 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.461433887 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.461540937 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.461566925 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.503329039 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.516843081 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.516851902 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.563600063 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.757263899 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757452011 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757502079 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.757513046 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757641077 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757688046 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.757693052 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757807970 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757860899 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.757865906 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.757947922 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.758043051 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.758047104 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.758073092 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.758119106 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.758162022 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.761982918 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.762063980 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.762073040 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.763264894 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:51.763489008 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:51.763535976 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764360905 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764378071 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764400005 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764421940 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.764432907 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764441967 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764451981 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.764472008 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.764492989 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.764540911 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:51.764602900 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:51.765986919 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.766014099 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.766068935 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.766072989 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:51.766074896 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.766100883 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.766161919 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:51.766536951 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:51.766552925 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:51.766953945 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:51.767335892 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:51.767345905 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:51.768249989 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:51.768313885 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:51.768748045 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.768781900 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.768811941 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.768826008 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.768845081 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.769112110 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:51.769170046 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:51.769328117 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:51.769335985 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:51.770306110 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.770359993 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.770435095 CET | 49715 | 443 | 192.168.2.5 | 151.101.2.137 |
Jan 16, 2025 01:21:51.770445108 CET | 443 | 49715 | 151.101.2.137 | 192.168.2.5 |
Jan 16, 2025 01:21:51.808348894 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:51.820863962 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.111277103 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:52.111344099 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:52.111423016 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:52.111423016 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.111505985 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.112062931 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.112062931 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.112103939 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:21:52.112164974 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:21:52.129889965 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.129909992 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.129915953 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.129977942 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.129986048 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.130052090 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.130074978 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.130101919 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.130103111 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.130129099 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349101067 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349136114 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349184990 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349200964 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349291086 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349324942 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349337101 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349338055 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349359989 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349396944 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349400997 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349421978 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349432945 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349441051 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349457026 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349457026 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349524975 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349556923 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349648952 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349663973 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349705935 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.349751949 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.349879026 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.351059914 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.13 |
Jan 16, 2025 01:21:52.351106882 CET | 443 | 49716 | 65.9.66.13 | 192.168.2.5 |
Jan 16, 2025 01:21:52.410429001 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:52.410512924 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:52.410584927 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:52.410944939 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:52.410964966 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.186564922 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.186836004 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.186871052 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.187932968 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.188018084 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.188389063 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.188460112 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.188627958 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.188647985 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.231622934 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.477332115 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.488696098 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.488704920 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.488718033 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.488796949 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.488867998 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.488940001 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.571476936 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.571502924 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.571603060 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.571639061 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.571655989 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.571717024 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.589329004 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.589375973 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.589440107 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.589462996 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.589481115 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.589504004 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.658715963 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.658793926 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:53.658807039 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.658863068 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.659209967 CET | 49720 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:21:53.659224987 CET | 443 | 49720 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:21:59.471793890 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:59.471949100 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:21:59.472013950 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:00.661422014 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:00.661485910 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:48.968815088 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:48.968858004 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:48.969391108 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:48.969598055 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:48.969609022 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:49.611464024 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:49.611948013 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:49.611970901 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:49.612431049 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:49.612863064 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:49.612938881 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:49.655282974 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:22:59.514455080 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:59.514524937 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Jan 16, 2025 01:22:59.514580965 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:23:00.657602072 CET | 49994 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 16, 2025 01:23:00.657638073 CET | 443 | 49994 | 142.250.184.228 | 192.168.2.5 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 16, 2025 01:21:44.240628958 CET | 53 | 52136 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:44.313388109 CET | 53 | 62670 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:45.409104109 CET | 53 | 56950 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:48.911118031 CET | 59957 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:48.911118031 CET | 54507 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:48.917916059 CET | 53 | 59957 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:48.917937040 CET | 53 | 54507 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.220588923 CET | 59809 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.220720053 CET | 49767 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.227134943 CET | 53 | 59809 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.227791071 CET | 53 | 49767 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.244405985 CET | 63687 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.244613886 CET | 60035 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.250984907 CET | 53 | 63687 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.251897097 CET | 53 | 60035 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.898958921 CET | 63521 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.899420023 CET | 64955 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.906090975 CET | 53 | 63521 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.906210899 CET | 53 | 64955 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.914040089 CET | 61099 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.914163113 CET | 61557 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.914530993 CET | 53194 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.914664984 CET | 54897 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:50.921489954 CET | 53 | 53194 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.923037052 CET | 53 | 61557 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:50.924781084 CET | 53 | 61099 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.085534096 CET | 53 | 54897 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:51.851810932 CET | 53 | 54926 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:52.382782936 CET | 64469 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:52.383146048 CET | 52535 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:52.386771917 CET | 52079 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:52.386989117 CET | 50601 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:52.393004894 CET | 53 | 52535 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:52.393021107 CET | 53 | 64469 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:52.393812895 CET | 62432 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:21:52.395585060 CET | 53 | 50601 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:52.400774002 CET | 53 | 62432 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:21:52.409907103 CET | 53 | 52079 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:22:02.395153046 CET | 53 | 49803 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:22:21.257247925 CET | 53 | 62443 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:22:43.725373983 CET | 53 | 53731 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:22:44.180871964 CET | 53 | 52970 | 1.1.1.1 | 192.168.2.5 |
Timestamp | Source IP | Dest IP | Checksum | Code | Type |
---|---|---|---|---|---|
Jan 16, 2025 01:21:51.085623980 CET | 192.168.2.5 | 1.1.1.1 | c218 | (Port unreachable) | Destination Unreachable |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jan 16, 2025 01:21:48.911118031 CET | 192.168.2.5 | 1.1.1.1 | 0xbd50 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:48.911118031 CET | 192.168.2.5 | 1.1.1.1 | 0x3f10 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.220588923 CET | 192.168.2.5 | 1.1.1.1 | 0xec60 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.220720053 CET | 192.168.2.5 | 1.1.1.1 | 0xd741 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.244405985 CET | 192.168.2.5 | 1.1.1.1 | 0x6994 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.244613886 CET | 192.168.2.5 | 1.1.1.1 | 0xc9d7 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.898958921 CET | 192.168.2.5 | 1.1.1.1 | 0x60c6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.899420023 CET | 192.168.2.5 | 1.1.1.1 | 0xb531 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.914040089 CET | 192.168.2.5 | 1.1.1.1 | 0x3762 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.914163113 CET | 192.168.2.5 | 1.1.1.1 | 0x991d | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.914530993 CET | 192.168.2.5 | 1.1.1.1 | 0xd670 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:50.914664984 CET | 192.168.2.5 | 1.1.1.1 | 0x365d | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.382782936 CET | 192.168.2.5 | 1.1.1.1 | 0x6a72 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.383146048 CET | 192.168.2.5 | 1.1.1.1 | 0xae69 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.386771917 CET | 192.168.2.5 | 1.1.1.1 | 0x6e3d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.386989117 CET | 192.168.2.5 | 1.1.1.1 | 0x81a0 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.393812895 CET | 192.168.2.5 | 1.1.1.1 | 0xacc4 | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jan 16, 2025 01:21:48.917916059 CET | 1.1.1.1 | 192.168.2.5 | 0xbd50 | No error (0) | 142.250.184.228 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:48.917937040 CET | 1.1.1.1 | 192.168.2.5 | 0x3f10 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:21:50.227134943 CET | 1.1.1.1 | 192.168.2.5 | 0xec60 | No error (0) | 209.94.90.1 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.227791071 CET | 1.1.1.1 | 192.168.2.5 | 0xd741 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:21:50.250984907 CET | 1.1.1.1 | 192.168.2.5 | 0x6994 | No error (0) | 209.94.90.1 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.251897097 CET | 1.1.1.1 | 192.168.2.5 | 0xc9d7 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:21:50.906090975 CET | 1.1.1.1 | 192.168.2.5 | 0x60c6 | No error (0) | 151.101.2.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.906090975 CET | 1.1.1.1 | 192.168.2.5 | 0x60c6 | No error (0) | 151.101.194.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.906090975 CET | 1.1.1.1 | 192.168.2.5 | 0x60c6 | No error (0) | 151.101.130.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.906090975 CET | 1.1.1.1 | 192.168.2.5 | 0x60c6 | No error (0) | 151.101.66.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.921489954 CET | 1.1.1.1 | 192.168.2.5 | 0xd670 | No error (0) | 208.91.114.103 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.923037052 CET | 1.1.1.1 | 192.168.2.5 | 0x991d | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.924781084 CET | 1.1.1.1 | 192.168.2.5 | 0x3762 | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.924781084 CET | 1.1.1.1 | 192.168.2.5 | 0x3762 | No error (0) | 65.9.66.13 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.924781084 CET | 1.1.1.1 | 192.168.2.5 | 0x3762 | No error (0) | 65.9.66.107 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.924781084 CET | 1.1.1.1 | 192.168.2.5 | 0x3762 | No error (0) | 65.9.66.52 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:50.924781084 CET | 1.1.1.1 | 192.168.2.5 | 0x3762 | No error (0) | 65.9.66.41 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.393004894 CET | 1.1.1.1 | 192.168.2.5 | 0xae69 | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.393021107 CET | 1.1.1.1 | 192.168.2.5 | 0x6a72 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.395585060 CET | 1.1.1.1 | 192.168.2.5 | 0x81a0 | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.400774002 CET | 1.1.1.1 | 192.168.2.5 | 0xacc4 | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:21:52.409907103 CET | 1.1.1.1 | 192.168.2.5 | 0x6e3d | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.409907103 CET | 1.1.1.1 | 192.168.2.5 | 0x6e3d | No error (0) | 65.9.66.52 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.409907103 CET | 1.1.1.1 | 192.168.2.5 | 0x6e3d | No error (0) | 65.9.66.13 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.409907103 CET | 1.1.1.1 | 192.168.2.5 | 0x6e3d | No error (0) | 65.9.66.107 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:21:52.409907103 CET | 1.1.1.1 | 192.168.2.5 | 0x6e3d | No error (0) | 65.9.66.41 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.5 | 49714 | 209.94.90.1 | 443 | 2124 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:21:50 UTC | 714 | OUT | |
2025-01-16 00:21:50 UTC | 1069 | IN | |
2025-01-16 00:21:50 UTC | 300 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN | |
2025-01-16 00:21:50 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.5 | 49715 | 151.101.2.137 | 443 | 2124 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:21:51 UTC | 547 | OUT | |
2025-01-16 00:21:51 UTC | 613 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN | |
2025-01-16 00:21:51 UTC | 1378 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.5 | 49716 | 65.9.66.13 | 443 | 2124 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:21:51 UTC | 611 | OUT | |
2025-01-16 00:21:52 UTC | 807 | IN | |
2025-01-16 00:21:52 UTC | 15577 | IN | |
2025-01-16 00:21:52 UTC | 16384 | IN | |
2025-01-16 00:21:52 UTC | 16384 | IN | |
2025-01-16 00:21:52 UTC | 6857 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.5 | 49717 | 208.91.114.103 | 443 | 2124 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:21:51 UTC | 639 | OUT | |
2025-01-16 00:21:52 UTC | 548 | IN | |
2025-01-16 00:21:52 UTC | 4288 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.5 | 49720 | 65.9.66.52 | 443 | 2124 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:21:53 UTC | 384 | OUT | |
2025-01-16 00:21:53 UTC | 805 | IN | |
2025-01-16 00:21:53 UTC | 16384 | IN | |
2025-01-16 00:21:53 UTC | 16384 | IN | |
2025-01-16 00:21:53 UTC | 16384 | IN | |
2025-01-16 00:21:53 UTC | 6050 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 19:21:41 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 19:21:43 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 19:21:49 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |