Windows
Analysis Report
http://square-forest-7d7b.pestoreddddddd.workers.dev/
Overview
General Information
Detection
Score: | 64 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 5100 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4820 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2256 --fi eld-trial- handle=218 8,i,141154 8165349737 8129,40941 7622708445 2522,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6484 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://square -forest-7d 7b.pestore ddddddd.wo rkers.dev/ " MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_BlockedWebSite | Yara detected BlockedWebSite | Joe Security |
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_BlockedWebSite | Yara detected BlockedWebSite | Joe Security |
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: | ||
Source: | SlashNext: |
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | File source: | ||
Source: | File source: |
Source: | HTTP Parser: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | TCP traffic: | ||
Source: | TCP traffic: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | Classification label: |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 1 Process Injection | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 2 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing | ||
100% | SlashNext | Credential Stealing type: Phishing & Social Engineering |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
100% | Avira URL Cloud | phishing | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
100% | Avira URL Cloud | phishing | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
100% | Avira URL Cloud | phishing | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
square-forest-7d7b.pestoreddddddd.workers.dev | 188.114.97.3 | true | false | unknown | |
www.google.com | 142.250.184.228 | true | false | unknown | |
fp2e7a.wpc.phicdn.net | 192.229.221.95 | true | false | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false |
| unknown | |
false |
| unknown | |
false | unknown | ||
false |
| unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown | ||
false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
188.114.97.3 | square-forest-7d7b.pestoreddddddd.workers.dev | European Union | 13335 | CLOUDFLARENETUS | false | |
188.114.96.3 | unknown | European Union | 13335 | CLOUDFLARENETUS | false | |
142.250.184.228 | www.google.com | United States | 15169 | GOOGLEUS | false |
IP |
---|
192.168.2.4 |
192.168.2.5 |
Joe Sandbox version: | 40.0.0 Tourmaline |
Analysis ID: | 1501485 |
Start date and time: | 2024-08-30 00:34:23 +02:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 3m 3s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | http://square-forest-7d7b.pestoreddddddd.workers.dev/ |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 8 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal64.phis.win@17/10@8/6 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 216.58.206.78, 108.177.15.84, 172.217.165.131, 34.104.35.123, 40.68.123.157, 2.16.100.168, 88.221.110.91, 192.229.221.95, 20.242.39.171, 20.3.187.198, 20.166.126.56, 13.85.23.206, 13.95.31.18, 131.107.255.255, 142.250.184.227
- Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, dns.msftncsi.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtSetInformationFile calls found.
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: http://square-forest-7d7b.pestoreddddddd.workers.dev/
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 39358 |
Entropy (8bit): | 5.455014677341829 |
Encrypted: | false |
SSDEEP: | 768:VCCDCaCTC4CcbOFRXPoF4Z+WcxWo6CB3utX:VCCDCaCTC4CCGPQ+C+tX |
MD5: | 9CBDED0003D8B21BFEEFDEBC5E9B5667 |
SHA1: | 46872D9642C69F89B419D4F335E0CAB52B209250 |
SHA-256: | 5A529A51045073332F021E70A7D4C843D962E6017B15A4EE1B3ABDD829D76269 |
SHA-512: | D77DC39E2F515E728A0BAE67462E4E6E3CF1286E0CB6FD260F335D6C5EEAD3EA7A1DF60DAAF197768C0DB6BB631193B63F10D1D4ED6D83E3CB59363C96224CE5 |
Malicious: | false |
Reputation: | low |
URL: | https://square-forest-7d7b.pestoreddddddd.workers.dev/favicon.ico |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 4394 |
Entropy (8bit): | 5.086834207986578 |
Encrypted: | false |
SSDEEP: | 96:1j9jwIjYjUDK/D5DMF+BOisE1aA2ZLimSurR49PaQxJbGD:1j9jhjYjIK/Vo+tsE1+ZOmSurO9ieJGD |
MD5: | 42E2304F7B17355606F7DF5DE634DEBE |
SHA1: | 9BCE8C796887C60FEA2870F33021EBF7774B5184 |
SHA-256: | B35F5823D1D7FB9931D0F320419EC6BAC5FA4034BE228D7B944FEF8038120115 |
SHA-512: | 623038872677F76B6E8D488FD91CB727B9D1C6CAB0DAF74136990BF628543643ECD874544AFE01620837F5F8AC146C6690C8F8F6F5FDF3FAE92D0AFF4AEAEFE2 |
Malicious: | false |
Reputation: | low |
URL: | https://square-forest-7d7b.pestoreddddddd.workers.dev/ |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 452 |
Entropy (8bit): | 7.0936408308765495 |
Encrypted: | false |
SSDEEP: | 12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK |
MD5: | C33DE66281E933259772399D10A6AFE8 |
SHA1: | B9F9D500F8814381451011D4DCF59CD2D90AD94F |
SHA-256: | F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016 |
SHA-512: | 5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 452 |
Entropy (8bit): | 7.0936408308765495 |
Encrypted: | false |
SSDEEP: | 12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK |
MD5: | C33DE66281E933259772399D10A6AFE8 |
SHA1: | B9F9D500F8814381451011D4DCF59CD2D90AD94F |
SHA-256: | F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016 |
SHA-512: | 5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3 |
Malicious: | false |
Reputation: | low |
URL: | https://square-forest-7d7b.pestoreddddddd.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637 |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 39358 |
Entropy (8bit): | 5.455014677341829 |
Encrypted: | false |
SSDEEP: | 768:VCCDCaCTC4CcbOFRXPoF4Z+WcxWo6CB3utX:VCCDCaCTC4CCGPQ+C+tX |
MD5: | 9CBDED0003D8B21BFEEFDEBC5E9B5667 |
SHA1: | 46872D9642C69F89B419D4F335E0CAB52B209250 |
SHA-256: | 5A529A51045073332F021E70A7D4C843D962E6017B15A4EE1B3ABDD829D76269 |
SHA-512: | D77DC39E2F515E728A0BAE67462E4E6E3CF1286E0CB6FD260F335D6C5EEAD3EA7A1DF60DAAF197768C0DB6BB631193B63F10D1D4ED6D83E3CB59363C96224CE5 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 24051 |
Entropy (8bit): | 4.941039417164537 |
Encrypted: | false |
SSDEEP: | 192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk |
MD5: | 5E8C69A459A691B5D1B9BE442332C87D |
SHA1: | F24DD1AD7C9080575D92A9A9A2C42620725EF836 |
SHA-256: | 84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091 |
SHA-512: | 6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42 |
Malicious: | false |
Reputation: | low |
URL: | https://square-forest-7d7b.pestoreddddddd.workers.dev/cdn-cgi/styles/cf.errors.css |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Aug 30, 2024 00:35:16.980546951 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:16.992060900 CEST | 53 | 49730 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:16.992161989 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:16.998209000 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:16.998373985 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:17.004256964 CEST | 53 | 49730 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:17.005337000 CEST | 53 | 49730 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:17.492383003 CEST | 53 | 49730 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:17.493455887 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:17.500863075 CEST | 53 | 49730 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:17.501070976 CEST | 49730 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:18.310275078 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.310307980 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.310389996 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.310719013 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.310729980 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.776227951 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.776644945 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.776668072 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.777637959 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.777745008 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.778876066 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.778939009 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.779073954 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.824500084 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898118973 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898191929 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898222923 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898250103 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.898273945 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898312092 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.898333073 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.898386002 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.905956030 CEST | 49736 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.905983925 CEST | 443 | 49736 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.940644979 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.940684080 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:18.940819979 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.941133022 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:18.941145897 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.399980068 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.400645971 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.400670052 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.400996923 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.401380062 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.401452065 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.401654005 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.444506884 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523171902 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523222923 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523247957 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523277998 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523294926 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.523308992 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523320913 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523320913 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.523360014 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.523360014 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523371935 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.523407936 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.523420095 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.527847052 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.527869940 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.527909040 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.527936935 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.527951956 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.527962923 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.568403006 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.609925032 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610011101 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610035896 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610064983 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610093117 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.610102892 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610116959 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610131025 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.610152006 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.610160112 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610194921 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.610238075 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.610688925 CEST | 49737 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.610707045 CEST | 443 | 49737 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.627512932 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.627559900 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:19.627724886 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.627880096 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:19.627899885 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.126502991 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.129220963 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.129235029 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.129559994 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.176026106 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.368771076 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.368978024 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.369733095 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.412506104 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.469579935 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.469646931 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.469764948 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.502228022 CEST | 49739 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.502248049 CEST | 443 | 49739 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.556797981 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.556838036 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.557056904 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.557389975 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:20.557401896 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.634829998 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:20.634876013 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.635026932 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:20.635627031 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:20.635644913 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:20.639511108 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:20.639544010 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:20.639601946 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:20.639971018 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:20.639983892 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.014677048 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.015202045 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.015214920 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.015538931 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.016115904 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.016180992 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.016428947 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.060501099 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.102209091 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.102435112 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.102452040 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.103429079 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.103485107 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.103885889 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.103956938 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.104022026 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.104027987 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146219969 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.146317005 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146377087 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146408081 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146430969 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.146442890 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146481037 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146523952 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.146531105 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146610022 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.146615982 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146647930 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.146722078 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.146728992 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.151173115 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.151206017 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.151227951 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.151237011 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.151278973 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.151284933 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.193093061 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.233252048 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233318090 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233350039 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233356953 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.233371019 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233409882 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233412981 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.233423948 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233464956 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.233468056 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233479023 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.233514071 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.234034061 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234360933 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234400034 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234428883 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234451056 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.234457970 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234489918 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234493017 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.234522104 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234533072 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.234539032 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.234580040 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.235143900 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.235245943 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.235296965 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.235421896 CEST | 49742 | 443 | 192.168.2.4 | 188.114.97.3 |
Aug 30, 2024 00:35:21.235439062 CEST | 443 | 49742 | 188.114.97.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.241355896 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.241410971 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.241506100 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.241959095 CEST | 49743 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.241971970 CEST | 443 | 49743 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.481944084 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.481985092 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.482094049 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.482790947 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.482811928 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.509597063 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.520373106 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:21.520381927 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.521266937 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.521332026 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:21.640866041 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:21.641020060 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.691899061 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:21.691910028 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:21.738769054 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:21.979712963 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.982886076 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.982919931 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.983263016 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.983946085 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:21.984010935 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:21.984321117 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.024517059 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118010998 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118076086 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118103027 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118132114 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118160009 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118159056 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.118191957 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118222952 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.118230104 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118231058 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.118241072 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118318081 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.118323088 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118664980 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118693113 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118714094 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.118717909 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.118757963 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.206720114 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206790924 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206823111 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206836939 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.206854105 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206864119 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206901073 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.206913948 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206954002 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.206959009 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.206988096 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.207185984 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.207190037 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.207698107 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.207727909 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.207746983 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.207751989 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.207789898 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.207793951 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.208494902 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.208523989 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.208548069 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.208550930 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.208559036 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.208597898 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.209235907 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.209290028 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.209294081 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.209362984 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.209408998 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.222682953 CEST | 49745 | 443 | 192.168.2.4 | 188.114.96.3 |
Aug 30, 2024 00:35:22.222701073 CEST | 443 | 49745 | 188.114.96.3 | 192.168.2.4 |
Aug 30, 2024 00:35:22.399985075 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:22.400022030 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:22.400084972 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:22.403467894 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:22.403484106 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.067207098 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.067281008 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.069802999 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.069816113 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.070096970 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.108150005 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.152503014 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.339258909 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.339339972 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.339390039 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.339870930 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.339894056 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.339912891 CEST | 49746 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.339919090 CEST | 443 | 49746 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.390397072 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.390459061 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:23.390527010 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.391035080 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:23.391048908 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.032989979 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.033073902 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.035168886 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.035180092 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.035459042 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.038281918 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.080511093 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.310082912 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.310173035 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.310261011 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.313471079 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.313512087 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:24.313528061 CEST | 49747 | 443 | 192.168.2.4 | 184.28.90.27 |
Aug 30, 2024 00:35:24.313534975 CEST | 443 | 49747 | 184.28.90.27 | 192.168.2.4 |
Aug 30, 2024 00:35:31.191864014 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:31.191926003 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:31.192143917 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:31.626095057 CEST | 49744 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:35:31.626111984 CEST | 443 | 49744 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:35:35.091039896 CEST | 65211 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:35.095874071 CEST | 53 | 65211 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.095949888 CEST | 65211 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:35.096008062 CEST | 65211 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:35.100789070 CEST | 53 | 65211 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.539799929 CEST | 53 | 65211 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.540537119 CEST | 65211 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:35.545715094 CEST | 53 | 65211 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.545883894 CEST | 65211 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:36:20.694963932 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:20.695007086 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:20.695080042 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:20.695486069 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:20.695501089 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:21.347105980 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:21.347505093 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:21.347526073 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:21.347793102 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:21.348361015 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:21.348406076 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:21.396192074 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:24.942444086 CEST | 49723 | 80 | 192.168.2.4 | 93.184.221.240 |
Aug 30, 2024 00:36:24.942717075 CEST | 49724 | 80 | 192.168.2.4 | 93.184.221.240 |
Aug 30, 2024 00:36:24.949074030 CEST | 80 | 49723 | 93.184.221.240 | 192.168.2.4 |
Aug 30, 2024 00:36:24.949120045 CEST | 49723 | 80 | 192.168.2.4 | 93.184.221.240 |
Aug 30, 2024 00:36:24.949414015 CEST | 80 | 49724 | 93.184.221.240 | 192.168.2.4 |
Aug 30, 2024 00:36:24.949450970 CEST | 49724 | 80 | 192.168.2.4 | 93.184.221.240 |
Aug 30, 2024 00:36:31.251354933 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:31.251421928 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Aug 30, 2024 00:36:31.251504898 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:31.303395033 CEST | 65214 | 443 | 192.168.2.4 | 142.250.184.228 |
Aug 30, 2024 00:36:31.303420067 CEST | 443 | 65214 | 142.250.184.228 | 192.168.2.4 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Aug 30, 2024 00:35:16.868732929 CEST | 53 | 61032 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:16.869674921 CEST | 53 | 50942 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:17.006484032 CEST | 53 | 54915 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:18.040277004 CEST | 53 | 62042 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:18.274756908 CEST | 50078 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:18.274998903 CEST | 65497 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:18.288897991 CEST | 53 | 50078 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:18.291059017 CEST | 53 | 65497 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:18.293783903 CEST | 52143 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:18.293914080 CEST | 63716 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:18.309120893 CEST | 53 | 63716 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:18.309837103 CEST | 53 | 52143 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:20.616616011 CEST | 58818 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:20.617185116 CEST | 64041 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:20.628976107 CEST | 53 | 64041 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:20.631453991 CEST | 59698 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:20.631791115 CEST | 53789 | 53 | 192.168.2.4 | 1.1.1.1 |
Aug 30, 2024 00:35:20.634071112 CEST | 53 | 58818 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:20.637981892 CEST | 53 | 59698 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:20.638428926 CEST | 53 | 53789 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.090529919 CEST | 53 | 64460 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:35.201756001 CEST | 53 | 53516 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:35:36.541734934 CEST | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
Aug 30, 2024 00:35:54.316538095 CEST | 53 | 59350 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:36:16.602173090 CEST | 53 | 57911 | 1.1.1.1 | 192.168.2.4 |
Aug 30, 2024 00:36:16.941785097 CEST | 53 | 58641 | 1.1.1.1 | 192.168.2.4 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Aug 30, 2024 00:35:18.274756908 CEST | 192.168.2.4 | 1.1.1.1 | 0x7691 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Aug 30, 2024 00:35:18.274998903 CEST | 192.168.2.4 | 1.1.1.1 | 0xd417 | Standard query (0) | 65 | IN (0x0001) | false | |
Aug 30, 2024 00:35:18.293783903 CEST | 192.168.2.4 | 1.1.1.1 | 0xd8c0 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Aug 30, 2024 00:35:18.293914080 CEST | 192.168.2.4 | 1.1.1.1 | 0xa983 | Standard query (0) | 65 | IN (0x0001) | false | |
Aug 30, 2024 00:35:20.616616011 CEST | 192.168.2.4 | 1.1.1.1 | 0x1050 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Aug 30, 2024 00:35:20.617185116 CEST | 192.168.2.4 | 1.1.1.1 | 0x1954 | Standard query (0) | 65 | IN (0x0001) | false | |
Aug 30, 2024 00:35:20.631453991 CEST | 192.168.2.4 | 1.1.1.1 | 0xc760 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Aug 30, 2024 00:35:20.631791115 CEST | 192.168.2.4 | 1.1.1.1 | 0x3415 | Standard query (0) | 65 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Aug 30, 2024 00:35:18.288897991 CEST | 1.1.1.1 | 192.168.2.4 | 0x7691 | No error (0) | 188.114.97.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:18.288897991 CEST | 1.1.1.1 | 192.168.2.4 | 0x7691 | No error (0) | 188.114.96.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:18.291059017 CEST | 1.1.1.1 | 192.168.2.4 | 0xd417 | No error (0) | 65 | IN (0x0001) | false | |||
Aug 30, 2024 00:35:18.309120893 CEST | 1.1.1.1 | 192.168.2.4 | 0xa983 | No error (0) | 65 | IN (0x0001) | false | |||
Aug 30, 2024 00:35:18.309837103 CEST | 1.1.1.1 | 192.168.2.4 | 0xd8c0 | No error (0) | 188.114.97.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:18.309837103 CEST | 1.1.1.1 | 192.168.2.4 | 0xd8c0 | No error (0) | 188.114.96.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:20.628976107 CEST | 1.1.1.1 | 192.168.2.4 | 0x1954 | No error (0) | 65 | IN (0x0001) | false | |||
Aug 30, 2024 00:35:20.634071112 CEST | 1.1.1.1 | 192.168.2.4 | 0x1050 | No error (0) | 188.114.96.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:20.634071112 CEST | 1.1.1.1 | 192.168.2.4 | 0x1050 | No error (0) | 188.114.97.3 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:20.637981892 CEST | 1.1.1.1 | 192.168.2.4 | 0xc760 | No error (0) | 142.250.184.228 | A (IP address) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:20.638428926 CEST | 1.1.1.1 | 192.168.2.4 | 0x3415 | No error (0) | 65 | IN (0x0001) | false | |||
Aug 30, 2024 00:35:31.988207102 CEST | 1.1.1.1 | 192.168.2.4 | 0xee61 | No error (0) | fp2e7a.wpc.phicdn.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Aug 30, 2024 00:35:31.988207102 CEST | 1.1.1.1 | 192.168.2.4 | 0xee61 | No error (0) | 192.229.221.95 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49736 | 188.114.97.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:18 UTC | 688 | OUT | |
2024-08-29 22:35:18 UTC | 589 | IN | |
2024-08-29 22:35:18 UTC | 780 | IN | |
2024-08-29 22:35:18 UTC | 1369 | IN | |
2024-08-29 22:35:18 UTC | 1369 | IN | |
2024-08-29 22:35:18 UTC | 884 | IN | |
2024-08-29 22:35:18 UTC | 5 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49737 | 188.114.97.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:19 UTC | 617 | OUT | |
2024-08-29 22:35:19 UTC | 411 | IN | |
2024-08-29 22:35:19 UTC | 958 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN | |
2024-08-29 22:35:19 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.4 | 49739 | 188.114.97.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:20 UTC | 709 | OUT | |
2024-08-29 22:35:20 UTC | 409 | IN | |
2024-08-29 22:35:20 UTC | 452 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.4 | 49742 | 188.114.97.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:21 UTC | 646 | OUT | |
2024-08-29 22:35:21 UTC | 589 | IN | |
2024-08-29 22:35:21 UTC | 780 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN | |
2024-08-29 22:35:21 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.4 | 49743 | 188.114.96.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:21 UTC | 415 | OUT | |
2024-08-29 22:35:21 UTC | 409 | IN | |
2024-08-29 22:35:21 UTC | 452 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
5 | 192.168.2.4 | 49745 | 188.114.96.3 | 443 | 4820 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:21 UTC | 380 | OUT | |
2024-08-29 22:35:22 UTC | 587 | IN | |
2024-08-29 22:35:22 UTC | 782 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN | |
2024-08-29 22:35:22 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
6 | 192.168.2.4 | 49746 | 184.28.90.27 | 443 |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:23 UTC | 161 | OUT | |
2024-08-29 22:35:23 UTC | 467 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
7 | 192.168.2.4 | 49747 | 184.28.90.27 | 443 |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-08-29 22:35:24 UTC | 239 | OUT | |
2024-08-29 22:35:24 UTC | 515 | IN | |
2024-08-29 22:35:24 UTC | 55 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 18:35:12 |
Start date: | 29/08/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 18:35:14 |
Start date: | 29/08/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 18:35:17 |
Start date: | 29/08/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |