Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1530542
MD5:	79e1b7a6f4ff8a0eae6d7793bce8539d
SHA1:	496403b3364313651db9893f5f0350d2fae6e4d0
SHA256:	c61bd0162e75d14d14741c52d76f1c61d0ae8fa5c6e3e2b394ba7d939596fb7e
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Deletes system log files

Sample tries to access files in /etc/config/ (typical for OpenWRT routers)

Creates hidden files and/or directories

Found strings indicative of a multi-platform dropper

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530542
Start date and time:	2024-10-10 09:44:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal56.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/na.elf
PID:	6209
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	thIs wEek on xLaB lEarNs nOthinG xd
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 6209, Parent: 6127, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/na.elf

na.elf New Fork (PID: 6211, Parent: 6209)

na.elf New Fork (PID: 6212, Parent: 6209)

na.elf New Fork (PID: 6216, Parent: 6209)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 26%

Source: na.elf	String: ash\|login\|wget\|curl\|tftp\|ntpdate
Source: na.elf	String: /proc//exe\|ash\|login\|wget\|curl\|tftp\|ntpdate/fd/socket\|proc/usr/bin/usr/sbin/system/mnt/mtd/app/org/z/zbin/home/app/dvr/bin/duksan/userfs/mnt/app/usr/etc/dvr/main/usr/local/var/bin/tmp/sqfs/z/bin/dvr/mnt/mtd/zconf/gm/bin/home/process/var/challenge/usr/lib/lib/systemd//usr/lib/systemd/system/system/bin//mnt//home/helper/home/davinci/usr/libexec//sbin//bin/

Source: /tmp/na.elf (PID: 6209)

Socket: 127.0.0.1:1234

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.evad.linELF@0/0@0/0

Data Obfuscation

Sample tries to access files in /etc/config/ (typical for OpenWRT routers)

Source: /tmp/na.elf (PID: 6212)

File: /etc/config

Jump to behavior

Source: /tmp/na.elf (PID: 6212)	Directory: /root/.cache	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /root/.ssh	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /root/.config	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /root/.local	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/na.elf (PID: 6212)	Directory: /etc/.java	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Deletes system log files

Source: /tmp/na.elf (PID: 6212)

Log files deleted: /var/log/kern.log

Jump to behavior

Source: /tmp/na.elf (PID: 6209)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 6209.1.00005626a0f99000.00005626a1022000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: na.elf, 6209.1.00005626a0f99000.00005626a1022000.rw-.sdmp	Binary or memory string: &V!/etc/qemu-binfmt/sparc
Source: na.elf, 6209.1.00007ffe72363000.00007ffe72384000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc
Source: na.elf, 6209.1.00007ffe72363000.00007ffe72384000.rw-.sdmp	Binary or memory string: Rx86_64/usr/bin/qemu-sparc/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Hidden Files and Directories	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Indicator Removal	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	26%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.59.243.227	unknown	United States	395082	BODIS-NJUS	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
199.59.243.227	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	www.personal-loans-jp8.xyz/slxf/
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	returncomplete.net/index.php
	7v8szLCQAn.exe	Get hash	malicious	FormBook	Browse	www.donante-de-ovulos.biz/ndmq/
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse
	SecuriteInfo.com.ELF.Mirai-AJJ.10901.28787.elf	Get hash	malicious	Unknown	Browse
	hhh.elf	Get hash	malicious	Unknown	Browse
	78Zrr9QqXv.elf	Get hash	malicious	Unknown	Browse
	3kPxYxB2f5.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Mirai	Browse
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse
	SecuriteInfo.com.ELF.Mirai-AJJ.10901.28787.elf	Get hash	malicious	Unknown	Browse
	hhh.elf	Get hash	malicious	Unknown	Browse
	78Zrr9QqXv.elf	Get hash	malicious	Unknown	Browse
	3kPxYxB2f5.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse	91.189.91.42
	SecuriteInfo.com.ELF.Mirai-AJJ.10901.28787.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hhh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	78Zrr9QqXv.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	na.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse	91.189.91.42
	SecuriteInfo.com.ELF.Mirai-AJJ.10901.28787.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	hhh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	78Zrr9QqXv.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
BODIS-NJUS	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	PO#001498.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
INIT7CH	na.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse	109.202.202.202
	SecuriteInfo.com.ELF.Mirai-AJJ.10901.28787.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	hhh.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	78Zrr9QqXv.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	3kPxYxB2f5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.9882881163765775
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	56'376 bytes
MD5:	79e1b7a6f4ff8a0eae6d7793bce8539d
SHA1:	496403b3364313651db9893f5f0350d2fae6e4d0
SHA256:	c61bd0162e75d14d14741c52d76f1c61d0ae8fa5c6e3e2b394ba7d939596fb7e
SHA512:	dbaf5b026ba137725c4751631a8ef87cadd19e607a2221e6b4a3fd26eb315bddcf28094a793d05f8b60877113764201d715b9a46ff890cf0d2e6eab96382b14b
SSDEEP:	1536:0SoIrxL0dHSwOiLQfzN8fkrqtO4fnfi2Pro:0O8M09naK8
TLSH:	2C431835B9762D2BC8D4697A22F74765F2F9074A24E8CA1E3D720E4EFF6064022177B4
File Content Preview:	.ELF...........................4.........4. ...(.......................x...x...............\|...\|...\|......E\........dt.Q................................@..(....@.2.................#.....bh..`.....!.....#...@.....".........`......$#...#...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	55976
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0xcba0	0x0	0x6	AX	4
.fini	PROGBITS	0x1cc50	0xcc50	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1cc68	0xcc68	0xb10	0x0	0x2	A	8
.ctors	PROGBITS	0x2d77c	0xd77c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x2d784	0xd784	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x2d790	0xd790	0x2d8	0x0	0x3	WA	8
.bss	NOBITS	0x2da68	0xda68	0x4270	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0xda68	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0xd778	0xd778	6.0112	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xd77c	0x2d77c	0x2d77c	0x2ec	0x455c	3.7398	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 09:44:56.000605106 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 10, 2024 09:44:57.024468899 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 10, 2024 09:45:11.180948973 CEST	60304	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:11.186110973 CEST	80	60304	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:11.186177015 CEST	60304	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:11.186553955 CEST	60304	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:11.191463947 CEST	80	60304	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:11.614424944 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 10, 2024 09:45:11.641446114 CEST	80	60304	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:11.641464949 CEST	80	60304	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:11.641511917 CEST	60304	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:11.641910076 CEST	60304	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:11.646660089 CEST	80	60304	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:21.853055000 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 10, 2024 09:45:23.630789042 CEST	60306	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:23.636224031 CEST	80	60306	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:23.636296034 CEST	60306	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:23.636334896 CEST	60306	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:23.641338110 CEST	80	60306	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:24.118134022 CEST	80	60306	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:24.118160009 CEST	80	60306	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:24.118220091 CEST	60306	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:24.118299007 CEST	60306	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:24.123224974 CEST	80	60306	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:28.000164032 CEST	42516	80	192.168.2.23	109.202.202.202
Oct 10, 2024 09:45:36.603142023 CEST	60308	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:36.608825922 CEST	80	60308	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:36.608901978 CEST	60308	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:36.608990908 CEST	60308	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:36.614551067 CEST	80	60308	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:37.064464092 CEST	80	60308	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:37.064558983 CEST	60308	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:37.064613104 CEST	80	60308	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:37.064707041 CEST	60308	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:37.069593906 CEST	80	60308	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:44.725260973 CEST	60310	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:44.730268002 CEST	80	60310	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:44.730329037 CEST	60310	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:44.730359077 CEST	60310	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:44.735270977 CEST	80	60310	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:45.183777094 CEST	80	60310	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:45.183804989 CEST	80	60310	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:45.183856010 CEST	60310	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:45.183970928 CEST	60310	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:45.188807964 CEST	80	60310	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:52.568722963 CEST	43928	443	192.168.2.23	91.189.91.42
Oct 10, 2024 09:45:56.751243114 CEST	60312	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:56.756146908 CEST	80	60312	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:56.756262064 CEST	60312	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:56.756324053 CEST	60312	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:56.761132002 CEST	80	60312	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:57.231874943 CEST	80	60312	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:57.231897116 CEST	80	60312	199.59.243.227	192.168.2.23
Oct 10, 2024 09:45:57.232285023 CEST	60312	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:57.232510090 CEST	60312	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:45:57.237535000 CEST	80	60312	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:05.595616102 CEST	60314	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:05.600565910 CEST	80	60314	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:05.600644112 CEST	60314	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:05.600826025 CEST	60314	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:05.605659008 CEST	80	60314	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:06.063608885 CEST	80	60314	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:06.063721895 CEST	80	60314	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:06.063805103 CEST	60314	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:06.063805103 CEST	60314	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:06.068691969 CEST	80	60314	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:13.045944929 CEST	42836	443	192.168.2.23	91.189.91.43
Oct 10, 2024 09:46:15.102222919 CEST	60316	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:15.107135057 CEST	80	60316	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:15.107208014 CEST	60316	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:15.107264996 CEST	60316	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:15.112176895 CEST	80	60316	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:15.562035084 CEST	80	60316	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:15.562155962 CEST	80	60316	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:15.562243938 CEST	60316	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:15.562344074 CEST	60316	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:15.567198992 CEST	80	60316	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:27.066009045 CEST	60318	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:27.071163893 CEST	80	60318	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:27.071293116 CEST	60318	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:27.071327925 CEST	60318	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:27.076343060 CEST	80	60318	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:27.553704023 CEST	80	60318	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:27.553736925 CEST	80	60318	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:27.553823948 CEST	60318	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:27.553916931 CEST	60318	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:27.558717966 CEST	80	60318	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:43.615798950 CEST	60320	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:43.620711088 CEST	80	60320	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:43.620796919 CEST	60320	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:43.620847940 CEST	60320	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:43.625682116 CEST	80	60320	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:44.074449062 CEST	80	60320	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:44.074781895 CEST	60320	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:44.074904919 CEST	80	60320	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:44.075017929 CEST	60320	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:44.079924107 CEST	80	60320	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:46.895350933 CEST	60322	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:46.900176048 CEST	80	60322	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:46.900279999 CEST	60322	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:46.900331020 CEST	60322	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:46.905205965 CEST	80	60322	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:47.351900101 CEST	80	60322	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:47.351922035 CEST	80	60322	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:47.352307081 CEST	60322	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:47.352643967 CEST	60322	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:47.357621908 CEST	80	60322	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:59.869843006 CEST	60324	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:59.874701977 CEST	80	60324	199.59.243.227	192.168.2.23
Oct 10, 2024 09:46:59.874810934 CEST	60324	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:59.874856949 CEST	60324	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:46:59.879798889 CEST	80	60324	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:00.350373030 CEST	80	60324	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:00.350537062 CEST	60324	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:00.350651979 CEST	80	60324	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:00.350841045 CEST	60324	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:00.355576038 CEST	80	60324	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:17.530711889 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:17.535598040 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:17.535708904 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:17.535782099 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:17.540566921 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:18.144284964 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:18.144331932 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:18.144345999 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:18.144480944 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:18.144480944 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:18.144602060 CEST	60326	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:18.149626970 CEST	80	60326	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:30.145174980 CEST	60328	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:30.150156975 CEST	80	60328	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:30.150229931 CEST	60328	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:30.150274038 CEST	60328	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:30.155144930 CEST	80	60328	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:30.603737116 CEST	80	60328	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:30.603815079 CEST	60328	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:30.603982925 CEST	80	60328	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:30.604037046 CEST	60328	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:30.608856916 CEST	80	60328	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:48.963660002 CEST	60330	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:48.968585968 CEST	80	60330	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:48.968666077 CEST	60330	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:48.968733072 CEST	60330	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:48.973599911 CEST	80	60330	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:49.423525095 CEST	80	60330	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:49.423577070 CEST	80	60330	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:49.423636913 CEST	60330	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:49.423751116 CEST	60330	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:49.428678036 CEST	80	60330	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:51.865780115 CEST	60332	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:51.870714903 CEST	80	60332	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:51.870780945 CEST	60332	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:51.870816946 CEST	60332	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:51.875834942 CEST	80	60332	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:52.328980923 CEST	80	60332	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:52.329010963 CEST	80	60332	199.59.243.227	192.168.2.23
Oct 10, 2024 09:47:52.329143047 CEST	60332	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:52.329371929 CEST	60332	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:47:52.334175110 CEST	80	60332	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:04.854523897 CEST	60334	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:04.859447956 CEST	80	60334	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:04.859524965 CEST	60334	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:04.859559059 CEST	60334	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:04.864537954 CEST	80	60334	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:05.322624922 CEST	80	60334	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:05.322690964 CEST	80	60334	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:05.322741032 CEST	60334	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:05.322794914 CEST	60334	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:05.327625036 CEST	80	60334	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:17.907227039 CEST	60336	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:17.912103891 CEST	80	60336	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:17.912228107 CEST	60336	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:17.912292004 CEST	60336	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:17.917154074 CEST	80	60336	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:18.366620064 CEST	80	60336	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:18.366674900 CEST	80	60336	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:18.366760969 CEST	60336	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:18.366910934 CEST	60336	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:18.374691963 CEST	80	60336	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:25.492321968 CEST	60338	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:25.497246981 CEST	80	60338	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:25.497364998 CEST	60338	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:25.497415066 CEST	60338	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:25.502270937 CEST	80	60338	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:25.980664968 CEST	80	60338	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:25.980900049 CEST	60338	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:25.981137991 CEST	80	60338	199.59.243.227	192.168.2.23
Oct 10, 2024 09:48:25.981251001 CEST	60338	80	192.168.2.23	199.59.243.227
Oct 10, 2024 09:48:25.986109972 CEST	80	60338	199.59.243.227	192.168.2.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 09:44:54.493848085 CEST	40027	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:44:54.503940105 CEST	53	40027	116.203.104.203	192.168.2.23
Oct 10, 2024 09:44:54.513611078 CEST	58215	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:44:54.664731979 CEST	53	58215	63.231.92.27	192.168.2.23
Oct 10, 2024 09:44:54.665929079 CEST	45294	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:44:54.876158953 CEST	53	45294	161.97.219.84	192.168.2.23
Oct 10, 2024 09:44:54.877701998 CEST	45736	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:44:55.415952921 CEST	5353	45736	116.203.104.203	192.168.2.23
Oct 10, 2024 09:44:55.421791077 CEST	40522	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:45:00.425923109 CEST	38472	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:45:00.520023108 CEST	53	38472	162.243.19.47	192.168.2.23
Oct 10, 2024 09:45:00.521612883 CEST	42469	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:00.670950890 CEST	53	42469	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:00.671931028 CEST	52975	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:00.678631067 CEST	53	52975	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:00.679487944 CEST	54822	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:45:05.684137106 CEST	33251	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:05.887816906 CEST	53	33251	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:05.888629913 CEST	53029	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:45:10.894166946 CEST	33879	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:11.104041100 CEST	53	33879	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:11.105163097 CEST	49590	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.111620903 CEST	53	49590	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.112245083 CEST	35740	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.118647099 CEST	53	35740	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.119146109 CEST	52292	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.125453949 CEST	53	52292	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.125982046 CEST	47225	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.132116079 CEST	53	47225	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.132631063 CEST	39394	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.138998032 CEST	53	39394	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.139626980 CEST	34252	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.147674084 CEST	53	34252	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.148760080 CEST	35705	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.159935951 CEST	53	35705	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.160558939 CEST	45844	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.166878939 CEST	53	45844	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.167463064 CEST	41621	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.173727989 CEST	53	41621	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.174259901 CEST	51431	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:11.180541039 CEST	53	51431	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:11.642460108 CEST	42763	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:11.649197102 CEST	53	42763	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:11.649686098 CEST	42859	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:11.852957010 CEST	53	42859	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:11.853557110 CEST	34971	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:11.860450983 CEST	53	34971	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:11.860976934 CEST	43205	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:45:16.862601995 CEST	47389	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:45:16.948740005 CEST	53	47389	162.243.19.47	192.168.2.23
Oct 10, 2024 09:45:16.949755907 CEST	42247	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:17.099239111 CEST	53	42247	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:17.100315094 CEST	51111	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:45:17.107225895 CEST	53	51111	130.61.69.123	192.168.2.23
Oct 10, 2024 09:45:17.108026028 CEST	38056	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:17.119887114 CEST	53	38056	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:17.120646954 CEST	38373	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:18.434099913 CEST	5353	38373	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:18.435204029 CEST	57577	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:45:18.536638975 CEST	53	57577	192.3.165.37	192.168.2.23
Oct 10, 2024 09:45:18.537569046 CEST	35866	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:45:23.543072939 CEST	34668	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:23.553332090 CEST	53	34668	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:23.554456949 CEST	46395	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.560844898 CEST	53	46395	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.561954975 CEST	49628	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.568296909 CEST	53	49628	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.569286108 CEST	41276	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.575458050 CEST	53	41276	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.576450109 CEST	36523	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.582823038 CEST	53	36523	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.583982944 CEST	49209	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.590384007 CEST	53	49209	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.592722893 CEST	47613	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.599704981 CEST	53	47613	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.600794077 CEST	46308	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.607497931 CEST	53	46308	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.608647108 CEST	42583	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.615571976 CEST	53	42583	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.616534948 CEST	44564	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.623208046 CEST	53	44564	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:23.623970032 CEST	49567	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:23.630400896 CEST	53	49567	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:24.119100094 CEST	34720	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:24.129301071 CEST	53	34720	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:24.130073071 CEST	34785	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:24.139799118 CEST	53	34785	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:24.140527964 CEST	57223	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:29.144952059 CEST	36529	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:29.377808094 CEST	53	36529	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:29.378665924 CEST	48861	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:29.905922890 CEST	5353	48861	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:29.907253981 CEST	58960	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:30.410895109 CEST	5353	58960	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:30.412230015 CEST	51754	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:30.419296026 CEST	53	51754	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:30.420402050 CEST	41950	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:35.424277067 CEST	56462	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:36.399554968 CEST	53	56462	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:36.400710106 CEST	34816	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:36.411571980 CEST	53	34816	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:36.412847042 CEST	51857	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:45:36.513087988 CEST	53	51857	192.3.165.37	192.168.2.23
Oct 10, 2024 09:45:36.514350891 CEST	53093	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:36.524158955 CEST	53	53093	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:36.525037050 CEST	36324	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.531723976 CEST	53	36324	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.532572031 CEST	38838	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.539218903 CEST	53	38838	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.540707111 CEST	39164	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.547487020 CEST	53	39164	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.548243046 CEST	35208	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.555488110 CEST	53	35208	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.556236982 CEST	39598	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.563060045 CEST	53	39598	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.563915968 CEST	50005	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.570358992 CEST	53	50005	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.571403980 CEST	56689	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.577641964 CEST	53	56689	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.578481913 CEST	53548	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.586146116 CEST	53	53548	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.587023973 CEST	37822	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.594022989 CEST	53	37822	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:36.595066071 CEST	39914	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:36.602504015 CEST	53	39914	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:37.065817118 CEST	33260	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:37.275178909 CEST	53	33260	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:37.276346922 CEST	52673	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:45:37.733305931 CEST	5353	52673	192.3.165.37	192.168.2.23
Oct 10, 2024 09:45:37.734380960 CEST	39468	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:38.287091017 CEST	5353	39468	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:38.287847042 CEST	43960	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:45:38.294199944 CEST	53222	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:38.805411100 CEST	5353	53222	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:38.807512045 CEST	43938	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:39.336190939 CEST	5353	43938	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:39.336886883 CEST	55873	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:39.346687078 CEST	53	55873	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:39.347333908 CEST	52178	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:39.357136011 CEST	53	52178	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:39.357774973 CEST	50938	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:45:39.364537001 CEST	53	50938	130.61.69.123	192.168.2.23
Oct 10, 2024 09:45:39.365158081 CEST	57377	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:45:44.366733074 CEST	47297	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:44.439907074 CEST	53	47297	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:44.441071987 CEST	34800	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:44.650166988 CEST	53	34800	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:44.651587963 CEST	45638	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.657987118 CEST	53	45638	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.659255028 CEST	36932	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.665539026 CEST	53	36932	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.666671991 CEST	52560	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.673098087 CEST	53	52560	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.674081087 CEST	59899	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.680325031 CEST	53	59899	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.681265116 CEST	44197	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.687532902 CEST	53	44197	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.688606024 CEST	48883	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.694967985 CEST	53	48883	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.695909023 CEST	38337	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.702228069 CEST	53	38337	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.703197002 CEST	46670	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.709670067 CEST	53	46670	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.710659981 CEST	35887	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.717129946 CEST	53	35887	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:44.718211889 CEST	54797	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:44.724737883 CEST	53	54797	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:45.185043097 CEST	58368	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:50.190496922 CEST	44398	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:50.200633049 CEST	53	44398	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:50.202073097 CEST	39665	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:45:50.409873962 CEST	53	39665	161.97.219.84	192.168.2.23
Oct 10, 2024 09:45:50.411200047 CEST	53524	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:50.418129921 CEST	53	53524	130.61.64.122	192.168.2.23
Oct 10, 2024 09:45:50.419286966 CEST	51550	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:45:50.505577087 CEST	53	51550	162.243.19.47	192.168.2.23
Oct 10, 2024 09:45:50.507122993 CEST	52684	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:45:50.513973951 CEST	35275	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:50.524434090 CEST	53	35275	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:50.527446032 CEST	35310	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:45:51.061733007 CEST	5353	35310	185.84.81.194	192.168.2.23
Oct 10, 2024 09:45:51.063290119 CEST	51873	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:51.073136091 CEST	53	51873	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:51.074054956 CEST	37491	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:51.637068987 CEST	5353	37491	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:51.638643026 CEST	36549	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:51.648976088 CEST	53	36549	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:51.650043964 CEST	54404	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:45:56.653166056 CEST	44363	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.659239054 CEST	53	44363	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.660469055 CEST	34472	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.667079926 CEST	53	34472	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.668030024 CEST	58693	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.674525976 CEST	53	58693	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.675678968 CEST	56254	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.704644918 CEST	53	56254	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.706198931 CEST	44043	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.712641954 CEST	53	44043	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.713790894 CEST	59521	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.720386028 CEST	53	59521	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.721491098 CEST	34033	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.727596998 CEST	53	34033	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.728909016 CEST	60622	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.735508919 CEST	53	60622	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.736710072 CEST	49546	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.743093967 CEST	53	49546	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:56.744168043 CEST	37823	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:45:56.750670910 CEST	53	37823	8.8.8.8	192.168.2.23
Oct 10, 2024 09:45:57.233824968 CEST	33888	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:57.243633032 CEST	53	33888	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:57.244976997 CEST	59207	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:57.396598101 CEST	53	59207	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:57.398061037 CEST	57271	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:45:57.906351089 CEST	5353	57271	63.231.92.27	192.168.2.23
Oct 10, 2024 09:45:57.907845020 CEST	45360	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:45:59.153049946 CEST	5353	45360	116.203.104.203	192.168.2.23
Oct 10, 2024 09:45:59.154711962 CEST	40113	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:04.156033993 CEST	42045	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:04.677973986 CEST	5353	42045	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:04.679510117 CEST	58166	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:04.690131903 CEST	53	58166	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:04.691212893 CEST	58568	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:05.236171961 CEST	5353	58568	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:05.237626076 CEST	35782	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:05.326019049 CEST	53	35782	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:05.327210903 CEST	53771	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:05.416147947 CEST	53	53771	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:05.417341948 CEST	53458	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:05.427248955 CEST	53	53458	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:05.428322077 CEST	47371	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:05.520086050 CEST	53	47371	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:05.521414995 CEST	43175	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.527734995 CEST	53	43175	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.528873920 CEST	34772	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.535167933 CEST	53	34772	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.536283016 CEST	37395	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.542778969 CEST	53	37395	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.543824911 CEST	57351	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.550302982 CEST	53	57351	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.551294088 CEST	39876	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.557717085 CEST	53	39876	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.558697939 CEST	38957	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.565546036 CEST	53	38957	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.566520929 CEST	58532	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.573164940 CEST	53	58532	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.574135065 CEST	35465	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.580769062 CEST	53	35465	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.581706047 CEST	41957	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.587909937 CEST	53	41957	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:05.588877916 CEST	38657	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:05.595087051 CEST	53	38657	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:06.065139055 CEST	37939	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:06.557998896 CEST	5353	37939	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:06.559240103 CEST	54214	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:07.071571112 CEST	5353	54214	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:07.072792053 CEST	57134	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:07.222882986 CEST	53	57134	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:07.223689079 CEST	33655	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:46:07.336689949 CEST	53	33655	192.3.165.37	192.168.2.23
Oct 10, 2024 09:46:07.337482929 CEST	38399	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:07.429375887 CEST	53	38399	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:07.430186987 CEST	50831	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:46:07.907665968 CEST	5353	50831	192.3.165.37	192.168.2.23
Oct 10, 2024 09:46:07.908981085 CEST	35362	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:07.916102886 CEST	53	35362	130.61.64.122	192.168.2.23
Oct 10, 2024 09:46:07.917144060 CEST	40711	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:12.918982029 CEST	56790	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:13.452291012 CEST	5353	56790	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:13.453289986 CEST	39905	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:13.991717100 CEST	5353	39905	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:13.992711067 CEST	57111	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:14.493067980 CEST	5353	57111	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:14.494224072 CEST	55998	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:15.025518894 CEST	5353	55998	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:15.026875019 CEST	42397	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.033430099 CEST	53	42397	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.034482002 CEST	60676	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.040947914 CEST	53	60676	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.041990042 CEST	59287	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.048444986 CEST	53	59287	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.049252987 CEST	46910	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.055705070 CEST	53	46910	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.056848049 CEST	45051	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.063015938 CEST	53	45051	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.064023018 CEST	38812	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.070521116 CEST	53	38812	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.072608948 CEST	35154	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.079022884 CEST	53	35154	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.079958916 CEST	59597	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.086371899 CEST	53	59597	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.087364912 CEST	57273	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.093961954 CEST	53	57273	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.095025063 CEST	57503	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:15.101727962 CEST	53	57503	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:15.563719034 CEST	41618	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:46:20.569426060 CEST	35755	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:20.575917006 CEST	54527	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:46:20.582797050 CEST	53	54527	130.61.69.123	192.168.2.23
Oct 10, 2024 09:46:20.583986998 CEST	45267	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:20.733220100 CEST	53	45267	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:20.734545946 CEST	57938	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:25.736942053 CEST	43766	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:26.276938915 CEST	5353	43766	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:26.278299093 CEST	60704	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:26.289355993 CEST	53	60704	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:26.290548086 CEST	52377	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:46:26.407248020 CEST	53	52377	192.3.165.37	192.168.2.23
Oct 10, 2024 09:46:26.412807941 CEST	35020	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:26.423038960 CEST	53	35020	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:26.423943043 CEST	34775	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:26.969242096 CEST	5353	34775	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:26.970551968 CEST	47443	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:26.976859093 CEST	34530	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:26.987260103 CEST	53	34530	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:26.988440990 CEST	34484	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:26.994864941 CEST	53	34484	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:26.996053934 CEST	46401	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.002965927 CEST	53	46401	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.004059076 CEST	54943	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.010606050 CEST	53	54943	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.011806011 CEST	45783	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.018157959 CEST	53	45783	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.019176960 CEST	50574	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.025645018 CEST	53	50574	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.026874065 CEST	39988	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.033598900 CEST	53	39988	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.035239935 CEST	55852	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.041708946 CEST	53	55852	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.042964935 CEST	57738	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.049555063 CEST	53	57738	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.050762892 CEST	53405	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.057637930 CEST	53	53405	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.058948994 CEST	48910	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:27.065341949 CEST	53	48910	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:27.557271957 CEST	52810	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:32.560503006 CEST	41977	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:32.652410984 CEST	53	41977	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:32.654341936 CEST	57755	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:33.188296080 CEST	5353	57755	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:33.189945936 CEST	41356	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:33.274399042 CEST	53	41356	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:33.275443077 CEST	37225	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:38.279813051 CEST	53043	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:38.286387920 CEST	48566	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:43.291613102 CEST	52757	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:43.298846960 CEST	33655	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:43.310297966 CEST	53	33655	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:43.311798096 CEST	56735	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:43.322101116 CEST	53	56735	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:43.323528051 CEST	36787	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:43.333381891 CEST	53	36787	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:43.334762096 CEST	39681	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:43.534578085 CEST	53	39681	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:43.536923885 CEST	36265	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.543747902 CEST	53	36265	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.545156956 CEST	54884	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.551806927 CEST	53	54884	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.553375006 CEST	41399	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.559824944 CEST	53	41399	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.561228991 CEST	45049	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.567712069 CEST	53	45049	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.569083929 CEST	60804	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.575294971 CEST	53	60804	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.576723099 CEST	60294	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.583220005 CEST	53	60294	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.584671974 CEST	44653	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.591345072 CEST	53	44653	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.592739105 CEST	53489	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.599752903 CEST	53	53489	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.601095915 CEST	36676	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.607373953 CEST	53	36676	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:43.608741999 CEST	57795	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:43.615062952 CEST	53	57795	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:44.076698065 CEST	41018	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:46:44.082902908 CEST	51276	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:44.608798027 CEST	5353	51276	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:44.610414028 CEST	47326	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:45.110482931 CEST	5353	47326	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:45.111920118 CEST	44339	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:45.122062922 CEST	53	44339	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:45.123321056 CEST	32847	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:45.135401964 CEST	53	32847	130.61.64.122	192.168.2.23
Oct 10, 2024 09:46:45.136584044 CEST	48288	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:46:45.240052938 CEST	53	48288	192.3.165.37	192.168.2.23
Oct 10, 2024 09:46:45.242065907 CEST	42199	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:46:45.248662949 CEST	53	42199	130.61.69.123	192.168.2.23
Oct 10, 2024 09:46:45.250247002 CEST	48287	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:45.777220011 CEST	5353	48287	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:45.778485060 CEST	49921	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:46.317579985 CEST	5353	49921	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:46.320077896 CEST	42992	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:46.327236891 CEST	53	42992	130.61.64.122	192.168.2.23
Oct 10, 2024 09:46:46.328955889 CEST	39982	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:46.664575100 CEST	53	39982	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:46.666311979 CEST	56715	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:46.817895889 CEST	53	56715	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:46.819442987 CEST	47268	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.825639963 CEST	53	47268	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.827148914 CEST	35333	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.833765030 CEST	53	35333	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.835190058 CEST	55150	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.841495991 CEST	53	55150	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.842653036 CEST	56380	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.848897934 CEST	53	56380	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.850184917 CEST	57087	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.856410027 CEST	53	57087	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.857682943 CEST	35234	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.863985062 CEST	53	35234	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.865277052 CEST	42480	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.871691942 CEST	53	42480	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.873116970 CEST	58464	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.879535913 CEST	53	58464	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.880875111 CEST	59542	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.887088060 CEST	53	59542	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:46.888489962 CEST	40007	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:46.894754887 CEST	53	40007	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:47.354156971 CEST	40760	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:52.360527992 CEST	35155	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:46:52.454888105 CEST	53	35155	162.243.19.47	192.168.2.23
Oct 10, 2024 09:46:52.457144022 CEST	57006	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:52.668488026 CEST	53	57006	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:52.670149088 CEST	45666	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:53.195760965 CEST	5353	45666	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:53.197263002 CEST	43654	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:53.206948996 CEST	53	43654	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:53.208185911 CEST	56378	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:46:53.721470118 CEST	5353	56378	63.231.92.27	192.168.2.23
Oct 10, 2024 09:46:53.723221064 CEST	36703	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:46:53.733397007 CEST	53	36703	185.84.81.194	192.168.2.23
Oct 10, 2024 09:46:53.734333992 CEST	59859	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:46:54.472939014 CEST	5353	59859	116.203.104.203	192.168.2.23
Oct 10, 2024 09:46:54.474328995 CEST	39069	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:46:54.678390980 CEST	53	39069	161.97.219.84	192.168.2.23
Oct 10, 2024 09:46:54.680686951 CEST	43956	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:46:59.685080051 CEST	45810	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:46:59.783286095 CEST	53	45810	192.3.165.37	192.168.2.23
Oct 10, 2024 09:46:59.784770966 CEST	52871	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:46:59.791572094 CEST	53	52871	130.61.69.123	192.168.2.23
Oct 10, 2024 09:46:59.792934895 CEST	38451	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.799669027 CEST	53	38451	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.801038980 CEST	50724	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.807235003 CEST	53	50724	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.808731079 CEST	39757	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.815079927 CEST	53	39757	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.816643000 CEST	56832	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.822930098 CEST	53	56832	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.824466944 CEST	42714	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.830758095 CEST	53	42714	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.832443953 CEST	51973	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.838979006 CEST	53	51973	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.840590954 CEST	41224	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.846651077 CEST	53	41224	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.848295927 CEST	55878	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.854444027 CEST	53	55878	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.855668068 CEST	56537	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.861932039 CEST	53	56537	8.8.8.8	192.168.2.23
Oct 10, 2024 09:46:59.863074064 CEST	34876	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:46:59.869261026 CEST	53	34876	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:00.352055073 CEST	37163	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:47:00.855896950 CEST	5353	37163	63.231.92.27	192.168.2.23
Oct 10, 2024 09:47:00.857212067 CEST	51278	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:00.867026091 CEST	53	51278	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:00.868344069 CEST	46438	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:47:00.956979036 CEST	53	46438	162.243.19.47	192.168.2.23
Oct 10, 2024 09:47:00.957988977 CEST	47467	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:05.959695101 CEST	36033	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:47:06.479152918 CEST	5353	36033	63.231.92.27	192.168.2.23
Oct 10, 2024 09:47:06.480807066 CEST	55960	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:06.578906059 CEST	53	55960	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:06.580302954 CEST	52597	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:06.784394026 CEST	53	52597	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:06.785841942 CEST	55705	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:11.791584969 CEST	39092	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:11.906097889 CEST	53	39092	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:11.907844067 CEST	42215	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:12.433789968 CEST	5353	42215	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:12.435810089 CEST	46837	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:17.439130068 CEST	39798	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:17.450864077 CEST	53	39798	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:17.452491045 CEST	49550	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.459108114 CEST	53	49550	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.460398912 CEST	46357	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.466491938 CEST	53	46357	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.467540026 CEST	45644	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.474023104 CEST	53	45644	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.476018906 CEST	46244	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.482515097 CEST	53	46244	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.484250069 CEST	59866	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.490636110 CEST	53	59866	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.492044926 CEST	42117	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.498451948 CEST	53	42117	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.500299931 CEST	35996	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.506608963 CEST	53	35996	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.508256912 CEST	34717	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.515321970 CEST	53	34717	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.516541004 CEST	51350	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.522944927 CEST	53	51350	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:17.524104118 CEST	42055	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:17.530126095 CEST	53	42055	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:18.145839930 CEST	56388	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:18.645773888 CEST	5353	56388	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:18.647290945 CEST	35264	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:23.653220892 CEST	44187	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:23.659529924 CEST	52474	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:47:24.174568892 CEST	5353	52474	63.231.92.27	192.168.2.23
Oct 10, 2024 09:47:24.176439047 CEST	56144	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:24.183500051 CEST	53	56144	130.61.69.123	192.168.2.23
Oct 10, 2024 09:47:24.184855938 CEST	56761	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:24.191482067 CEST	53	56761	130.61.69.123	192.168.2.23
Oct 10, 2024 09:47:24.192620993 CEST	46139	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:24.199265957 CEST	53	46139	130.61.69.123	192.168.2.23
Oct 10, 2024 09:47:24.200200081 CEST	59905	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:47:29.204842091 CEST	37287	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:47:29.211977005 CEST	53	37287	130.61.64.122	192.168.2.23
Oct 10, 2024 09:47:29.213180065 CEST	54343	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:29.709471941 CEST	5353	54343	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:29.711112976 CEST	44015	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:29.912240028 CEST	53	44015	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:29.913527012 CEST	58946	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:47:30.064344883 CEST	53	58946	63.231.92.27	192.168.2.23
Oct 10, 2024 09:47:30.066252947 CEST	47691	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.072679996 CEST	53	47691	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.075411081 CEST	36801	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.081904888 CEST	53	36801	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.083380938 CEST	44957	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.089689016 CEST	53	44957	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.091417074 CEST	36275	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.098321915 CEST	53	36275	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.099415064 CEST	56066	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.105794907 CEST	53	56066	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.107059956 CEST	60937	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.113234043 CEST	53	60937	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.114599943 CEST	48793	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.121011019 CEST	53	48793	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.122293949 CEST	48018	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.128592968 CEST	53	48018	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.130287886 CEST	48155	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.136538982 CEST	53	48155	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.137552977 CEST	33487	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:30.144422054 CEST	53	33487	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:30.605082989 CEST	53825	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:35.608092070 CEST	40421	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:36.108932018 CEST	5353	40421	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:36.109982967 CEST	55302	5353	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:41.114757061 CEST	59297	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:41.688779116 CEST	5353	59297	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:41.690148115 CEST	33714	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:41.702074051 CEST	53	33714	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:41.702959061 CEST	57690	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:42.230400085 CEST	5353	57690	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:42.231621027 CEST	44135	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:47.234164953 CEST	43090	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:47.773315907 CEST	5353	43090	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:47.774521112 CEST	43394	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:47.780904055 CEST	45046	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:47.790512085 CEST	53	45046	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:47.791934013 CEST	40113	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:48.316941023 CEST	5353	40113	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:48.318176031 CEST	39871	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:48.885288954 CEST	5353	39871	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:48.886686087 CEST	50475	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.894293070 CEST	53	50475	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.896358967 CEST	48886	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.902623892 CEST	53	48886	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.903815031 CEST	44092	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.910494089 CEST	53	44092	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.911533117 CEST	57974	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.917859077 CEST	53	57974	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.918930054 CEST	33802	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.925373077 CEST	53	33802	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.926372051 CEST	49658	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.933146000 CEST	53	49658	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.934413910 CEST	40932	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.940833092 CEST	53	40932	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.941742897 CEST	57098	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.948049068 CEST	53	57098	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.949165106 CEST	39242	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.955602884 CEST	53	39242	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:48.956594944 CEST	42330	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:48.962987900 CEST	53	42330	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:49.425328016 CEST	56425	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:47:49.573719978 CEST	53	56425	63.231.92.27	192.168.2.23
Oct 10, 2024 09:47:49.575139046 CEST	58913	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:49.785402060 CEST	53	58913	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:49.786663055 CEST	54156	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:49.993113995 CEST	53	54156	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:49.994170904 CEST	40147	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:50.004040003 CEST	53	40147	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:50.005047083 CEST	58772	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:50.544241905 CEST	5353	58772	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:50.546009064 CEST	52708	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:50.552546978 CEST	60736	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:51.103379011 CEST	5353	60736	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:51.104608059 CEST	40590	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:51.577554941 CEST	5353	40590	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:51.579195023 CEST	60860	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:47:51.586112022 CEST	53	60860	130.61.69.123	192.168.2.23
Oct 10, 2024 09:47:51.587117910 CEST	40266	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:51.596810102 CEST	53	40266	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:51.597882032 CEST	54497	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:51.703210115 CEST	53	54497	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:51.704401016 CEST	32981	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:47:51.791754007 CEST	53	32981	162.243.19.47	192.168.2.23
Oct 10, 2024 09:47:51.792907000 CEST	38271	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.799490929 CEST	53	38271	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.800270081 CEST	52803	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.806420088 CEST	53	52803	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.807239056 CEST	58532	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.813813925 CEST	53	58532	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.814652920 CEST	38039	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.822103024 CEST	53	38039	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.823013067 CEST	52584	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.829171896 CEST	53	52584	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.830061913 CEST	46735	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.836510897 CEST	53	46735	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.837270021 CEST	42870	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.843945980 CEST	53	42870	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.844710112 CEST	40546	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.851289988 CEST	53	40546	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.852118015 CEST	44363	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.858377934 CEST	53	44363	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:51.859183073 CEST	58362	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:47:51.865384102 CEST	53	58362	8.8.8.8	192.168.2.23
Oct 10, 2024 09:47:52.330593109 CEST	59107	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:47:52.416925907 CEST	53	59107	162.243.19.47	192.168.2.23
Oct 10, 2024 09:47:52.418169975 CEST	51165	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:47:52.883893967 CEST	5353	51165	192.3.165.37	192.168.2.23
Oct 10, 2024 09:47:52.884942055 CEST	53125	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:52.891000032 CEST	47822	53	192.168.2.23	161.97.219.84
Oct 10, 2024 09:47:53.095782995 CEST	53	47822	161.97.219.84	192.168.2.23
Oct 10, 2024 09:47:53.097088099 CEST	34926	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:53.637094975 CEST	5353	34926	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:53.638277054 CEST	51122	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:53.652573109 CEST	53	51122	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:53.653512001 CEST	48887	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:47:54.213213921 CEST	5353	48887	116.203.104.203	192.168.2.23
Oct 10, 2024 09:47:54.214538097 CEST	34022	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:47:59.220246077 CEST	51773	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:47:59.226653099 CEST	52474	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:47:59.768785954 CEST	5353	52474	185.84.81.194	192.168.2.23
Oct 10, 2024 09:47:59.770047903 CEST	37621	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:48:04.775206089 CEST	45023	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:48:04.782224894 CEST	53	45023	130.61.69.123	192.168.2.23
Oct 10, 2024 09:48:04.782946110 CEST	46857	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.789278030 CEST	53	46857	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.789990902 CEST	35519	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.796468019 CEST	53	35519	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.797166109 CEST	52578	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.803563118 CEST	53	52578	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.804246902 CEST	60998	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.810934067 CEST	53	60998	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.811857939 CEST	56260	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.818171978 CEST	53	56260	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.819004059 CEST	59444	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.825295925 CEST	53	59444	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.826100111 CEST	48378	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.832475901 CEST	53	48378	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.833296061 CEST	35369	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.839482069 CEST	53	35369	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.840331078 CEST	50356	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.846746922 CEST	53	50356	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:04.847542048 CEST	42613	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:04.854151964 CEST	53	42613	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:05.323849916 CEST	33548	5353	192.168.2.23	162.243.19.47
Oct 10, 2024 09:48:10.326801062 CEST	52097	5353	192.168.2.23	161.97.219.84
Oct 10, 2024 09:48:10.838712931 CEST	5353	52097	161.97.219.84	192.168.2.23
Oct 10, 2024 09:48:10.840430975 CEST	45885	5353	192.168.2.23	130.61.64.122
Oct 10, 2024 09:48:15.842401981 CEST	37489	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:48:16.362179041 CEST	5353	37489	63.231.92.27	192.168.2.23
Oct 10, 2024 09:48:16.363771915 CEST	48541	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:48:16.374166012 CEST	53	48541	185.84.81.194	192.168.2.23
Oct 10, 2024 09:48:16.376045942 CEST	45834	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:16.469129086 CEST	53	45834	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:16.470632076 CEST	36021	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:16.568672895 CEST	53	36021	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:16.570249081 CEST	50693	53	192.168.2.23	162.243.19.47
Oct 10, 2024 09:48:16.660473108 CEST	53	50693	162.243.19.47	192.168.2.23
Oct 10, 2024 09:48:16.662432909 CEST	48081	5353	192.168.2.23	185.84.81.194
Oct 10, 2024 09:48:17.195955038 CEST	5353	48081	185.84.81.194	192.168.2.23
Oct 10, 2024 09:48:17.198071003 CEST	32819	5353	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:17.656743050 CEST	5353	32819	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:17.658070087 CEST	51345	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:48:17.807035923 CEST	53	51345	63.231.92.27	192.168.2.23
Oct 10, 2024 09:48:17.808469057 CEST	45863	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:48:17.819094896 CEST	53	45863	185.84.81.194	192.168.2.23
Oct 10, 2024 09:48:17.820647001 CEST	52252	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.827614069 CEST	53	52252	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.828865051 CEST	36734	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.835227013 CEST	53	36734	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.836978912 CEST	41324	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.843380928 CEST	53	41324	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.845088959 CEST	38684	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.851767063 CEST	53	38684	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.853852034 CEST	34925	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.860740900 CEST	53	34925	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.862493038 CEST	57960	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.869174004 CEST	53	57960	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.870403051 CEST	45489	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.878413916 CEST	53	45489	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.879688978 CEST	35415	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.887801886 CEST	53	35415	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.889035940 CEST	58438	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.898305893 CEST	53	58438	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:17.899632931 CEST	46506	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:17.906594038 CEST	53	46506	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:18.368506908 CEST	34952	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:48:18.910149097 CEST	5353	34952	116.203.104.203	192.168.2.23
Oct 10, 2024 09:48:18.911206961 CEST	50927	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:19.026623964 CEST	53	50927	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:19.028748989 CEST	38483	5353	192.168.2.23	54.36.111.116
Oct 10, 2024 09:48:24.034682989 CEST	39371	5353	192.168.2.23	63.231.92.27
Oct 10, 2024 09:48:24.561749935 CEST	5353	39371	63.231.92.27	192.168.2.23
Oct 10, 2024 09:48:24.562674999 CEST	60758	5353	192.168.2.23	116.203.104.203
Oct 10, 2024 09:48:25.104012012 CEST	5353	60758	116.203.104.203	192.168.2.23
Oct 10, 2024 09:48:25.105652094 CEST	36268	53	192.168.2.23	116.203.104.203
Oct 10, 2024 09:48:25.115621090 CEST	53	36268	116.203.104.203	192.168.2.23
Oct 10, 2024 09:48:25.119098902 CEST	41013	53	192.168.2.23	130.61.64.122
Oct 10, 2024 09:48:25.126065969 CEST	53	41013	130.61.64.122	192.168.2.23
Oct 10, 2024 09:48:25.127345085 CEST	46387	53	192.168.2.23	130.61.69.123
Oct 10, 2024 09:48:25.134268999 CEST	53	46387	130.61.69.123	192.168.2.23
Oct 10, 2024 09:48:25.135570049 CEST	46222	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:25.242114067 CEST	53	46222	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:25.245230913 CEST	46185	53	192.168.2.23	185.84.81.194
Oct 10, 2024 09:48:25.255590916 CEST	53	46185	185.84.81.194	192.168.2.23
Oct 10, 2024 09:48:25.256839037 CEST	39685	53	192.168.2.23	63.231.92.27
Oct 10, 2024 09:48:25.407725096 CEST	53	39685	63.231.92.27	192.168.2.23
Oct 10, 2024 09:48:25.409197092 CEST	37181	53	192.168.2.23	54.36.111.116
Oct 10, 2024 09:48:25.415811062 CEST	56116	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.422516108 CEST	53	56116	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.423666954 CEST	59110	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.430779934 CEST	53	59110	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.431853056 CEST	34562	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.438278913 CEST	53	34562	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.439374924 CEST	33284	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.445871115 CEST	53	33284	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.446973085 CEST	52183	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.453295946 CEST	53	52183	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.454397917 CEST	37724	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.460766077 CEST	53	37724	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.461914062 CEST	44217	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.468332052 CEST	53	44217	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.469521999 CEST	36079	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.475905895 CEST	53	36079	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.477206945 CEST	34622	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.483714104 CEST	53	34622	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.484987020 CEST	48471	53	192.168.2.23	8.8.8.8
Oct 10, 2024 09:48:25.491653919 CEST	53	48471	8.8.8.8	192.168.2.23
Oct 10, 2024 09:48:25.982590914 CEST	60696	53	192.168.2.23	192.3.165.37
Oct 10, 2024 09:48:26.095700026 CEST	53	60696	192.3.165.37	192.168.2.23
Oct 10, 2024 09:48:26.097721100 CEST	52089	5353	192.168.2.23	162.243.19.47

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 10, 2024 09:45:38.293299913 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:45:50.512373924 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:46:20.574506998 CEST	54.36.111.116	192.168.2.23	658d	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:46:26.975836992 CEST	54.36.111.116	192.168.2.23	6590	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:46:38.284991980 CEST	54.36.111.116	192.168.2.23	6590	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:46:43.296905041 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:46:44.081756115 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:47:23.658390999 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:47:47.779738903 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:47:50.551156044 CEST	54.36.111.116	192.168.2.23	658d	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:47:52.890201092 CEST	54.36.111.116	192.168.2.23	658d	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:47:59.225542068 CEST	54.36.111.116	192.168.2.23	6590	(Port unreachable)	Destination Unreachable
Oct 10, 2024 09:48:25.414431095 CEST	54.36.111.116	192.168.2.23	658e	(Port unreachable)	Destination Unreachable

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 09:44:54.503940105 CEST	116.203.104.203	192.168.2.23	0xa8f7	Format error (1)	75cents.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:44:54.664731979 CEST	63.231.92.27	192.168.2.23	0x49b6	Format error (1)	75cents.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:44:54.876158953 CEST	161.97.219.84	192.168.2.23	0x4984	Format error (1)	2joints.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:05.887816906 CEST	161.97.219.84	192.168.2.23	0xa9f9	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:11.649197102 CEST	130.61.64.122	192.168.2.23	0xf839	Format error (1)	fortyfivehundred.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:11.860450983 CEST	130.61.64.122	192.168.2.23	0xeae6	Format error (1)	75cents.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:16.948740005 CEST	162.243.19.47	192.168.2.23	0x166f	Format error (1)	kr2ddnsnet.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:17.099239111 CEST	63.231.92.27	192.168.2.23	0xa37c	Format error (1)	kr2ddnsnet.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:17.107225895 CEST	130.61.69.123	192.168.2.23	0x6ebb	Format error (1)	imaverygoodbadboy.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:18.536638975 CEST	192.3.165.37	192.168.2.23	0x904	Format error (1)	subcarrace.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:23.553332090 CEST	185.84.81.194	192.168.2.23	0xf61d	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:29.377808094 CEST	63.231.92.27	192.168.2.23	0x866	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:36.399554968 CEST	130.61.64.122	192.168.2.23	0x3b9d	Format error (1)	imaverygoodbadboy.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:39.357136011 CEST	116.203.104.203	192.168.2.23	0xcd98	Format error (1)	imaverygoodbadboy.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:50.200633049 CEST	116.203.104.203	192.168.2.23	0xdcc7	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:50.524434090 CEST	185.84.81.194	192.168.2.23	0x96f8	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:45:57.396598101 CEST	63.231.92.27	192.168.2.23	0xb61a	Format error (1)	subcarrace.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:04.690131903 CEST	185.84.81.194	192.168.2.23	0x945f	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:07.336689949 CEST	192.3.165.37	192.168.2.23	0x5525	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:07.916102886 CEST	130.61.64.122	192.168.2.23	0xae97	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:20.733220100 CEST	63.231.92.27	192.168.2.23	0x792d	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:26.987260103 CEST	116.203.104.203	192.168.2.23	0xf470	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:33.274399042 CEST	162.243.19.47	192.168.2.23	0xdfd9	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:43.310297966 CEST	116.203.104.203	192.168.2.23	0x3546	Format error (1)	kr2ddnsnet.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:43.322101116 CEST	185.84.81.194	192.168.2.23	0xc337	Format error (1)	kr2ddnsnet.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:43.333381891 CEST	116.203.104.203	192.168.2.23	0x5b79	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:46.664575100 CEST	161.97.219.84	192.168.2.23	0x2374	Format error (1)	fortyfivehundred.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:53.733397007 CEST	185.84.81.194	192.168.2.23	0xad22	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:54.678390980 CEST	161.97.219.84	192.168.2.23	0xc78e	Format error (1)	subcarrace.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:46:59.783286095 CEST	192.3.165.37	192.168.2.23	0x7d29	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:00.956979036 CEST	162.243.19.47	192.168.2.23	0x86f8	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:06.784394026 CEST	161.97.219.84	192.168.2.23	0x7126	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:29.912240028 CEST	161.97.219.84	192.168.2.23	0xa9c4	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:30.064344883 CEST	63.231.92.27	192.168.2.23	0x396	Format error (1)	kr3ddnsnet1.indy	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:53.095782995 CEST	161.97.219.84	192.168.2.23	0x7948	Format error (1)	krddnsnet.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:47:53.652573109 CEST	185.84.81.194	192.168.2.23	0xc044	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:48:17.807035923 CEST	63.231.92.27	192.168.2.23	0xb5ff	Format error (1)	75cents.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:48:17.819094896 CEST	185.84.81.194	192.168.2.23	0xb534	Format error (1)	75cents.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 09:48:25.407725096 CEST	63.231.92.27	192.168.2.23	0x59e0	Format error (1)	r3racegame.indy	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	60304	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:45:11.186553955 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:45:11.641446114 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	60306	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:45:23.636334896 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:45:24.118134022 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	60308	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:45:36.608990908 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:45:37.064464092 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	60310	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:45:44.730359077 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:45:45.183777094 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	60312	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:45:56.756324053 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:45:57.231874943 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	60314	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:05.600826025 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:46:06.063608885 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	60316	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:15.107264996 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:46:15.562035084 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	60318	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:27.071327925 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:46:27.553704023 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	60320	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:43.620847940 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:46:44.074449062 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	60322	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:46.900331020 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:46:47.351900101 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	60324	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:46:59.874856949 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:47:00.350373030 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	60326	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:47:17.535782099 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:47:18.144284964 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	60328	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:47:30.150274038 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:47:30.603737116 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	60330	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:47:48.968733072 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:47:49.423525095 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	60332	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:47:51.870816946 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:47:52.328980923 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	60334	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:48:04.859559059 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:48:05.322624922 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	60336	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:48:17.912292004 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:48:18.366620064 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	60338	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 09:48:25.497415066 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 10, 2024 09:48:25.980664968 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

System Behavior

Analysis Process: na.elf PID: 6209, Parent PID: 6127

General

Start time (UTC):	07:44:53
Start date (UTC):	10/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: na.elf PID: 6211, Parent PID: 6209

General

Start time (UTC):	07:44:53
Start date (UTC):	10/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: na.elf PID: 6212, Parent PID: 6209

General

Start time (UTC):	07:44:53
Start date (UTC):	10/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: na.elf PID: 6216, Parent PID: 6209

General

Start time (UTC):	07:44:53
Start date (UTC):	10/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Answers

HTTP Packets

System Behavior

Analysis Process: na.elf PID: 6209, Parent PID: 6127

General

Chronological Activities

Analysis Process: na.elf PID: 6211, Parent PID: 6209

General

Chronological Activities

Analysis Process: na.elf PID: 6212, Parent PID: 6209

General

Chronological Activities

Analysis Process: na.elf PID: 6216, Parent PID: 6209

General

Chronological Activities

Linux Analysis Report
na.elf