Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1532513
MD5:	e4d2003a4ae59b05c1d0d4733d6fc095
SHA1:	2f6608ce6ece37b1f76440e1a0a3735bdf003e98
SHA256:	6ac1a40c283fe5e9df84f46cf2ba19e58923782fa6cb6ae83d640d489a79f332
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false

Signatures

Found strings indicative of a multi-platform dropper

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532513
Start date and time:	2024-10-13 15:19:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	CLEAN
Classification:	clean2.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/na.elf
PID:	5538
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	thIs wEek on xLaB lEarNs nOthinG xd
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5538, Parent: 5456, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5540, Parent: 5538)

na.elf New Fork (PID: 5542, Parent: 5538)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: na.elf	String: ash\|login\|wget\|curl\|tftp\|ntpdate
Source: na.elf	String: N^Nu/proc/ash\|login\|wget\|curl\|tftp\|ntpdate/fdsocket\|proc/usr/bin/usr/sbin/system/mnt/mtd/app/org/z/zbin/home/app/dvr/bin/duksan/userfs/mnt/app/usr/etc/dvr/main/usr/local/var/bin/tmp/sqfs/z/bin/dvr/mnt/mtd/zconf/gm/bin/home/process/var/challenge/usr/lib/lib/systemd//usr/lib/systemd/system/system/bin//mnt//home/helper/home/davinci/usr/libexec//sbin//proc/net/tcp/proc./.ffdfd/maps/lib/h/proc/self/exe

Source: /tmp/na.elf (PID: 5538)

Socket: 127.0.0.1:1234

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: clean2.linELF@0/0@2/0

Source: /tmp/na.elf (PID: 5538)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5538.1.00007ffc40296000.00007ffc402b7000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5538.1.00007ffc40296000.00007ffc402b7000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: na.elf, 5538.1.00005616c5ed9000.00005616c5f5e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: na.elf, 5538.1.00005616c5ed9000.00005616c5f5e000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/m68k

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
daisy.ubuntu.com	0%	Virustotal		Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
199.59.243.227	unknown	United States		395082	BODIS-NJUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
199.59.243.227	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	myweatherradar.org/_tr
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	www.personal-loans-jp8.xyz/slxf/
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	returncomplete.net/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	arm6.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.25
	0h7AeM6QgB.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BODIS-NJUS	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	199.59.243.205
	na.elf	Get hash	malicious	Unknown	Browse	199.59.243.227
	na.elf	Get hash	malicious	Unknown	Browse	199.59.243.227
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.184182399253345
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	52'580 bytes
MD5:	e4d2003a4ae59b05c1d0d4733d6fc095
SHA1:	2f6608ce6ece37b1f76440e1a0a3735bdf003e98
SHA256:	6ac1a40c283fe5e9df84f46cf2ba19e58923782fa6cb6ae83d640d489a79f332
SHA512:	fabdcbfc4da215fb402963c49a442925b66433271156c7bb10b3b5f2a590586e4cf81631e2bda0d1a11ca3d309d7af8c982dc7af6f1b8567261fc24c4f6a5bc2
SSDEEP:	768:HXoPPtGTDNweESfemjY6yi7DhXhMI97by+8CdZI6aBIjTf5MQQHOP:HXoPE/NRpY8DNhfXy+8elaBIjT5MQes
TLSH:	343329D3B500ED7EF80FE73680078909F532B35555432B3267A3BDAB9E3618449B6E86
File Content Preview:	.ELF.......................D...4.........4. ...(.................................. .......................EH...... .dt.Q............................NV..a....da....8N^NuNV..J9...df>"y.... QJ.g.X.#.....N."y.... QJ.f.A.....J.g.Hy....N.X........dN^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	52140
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0xba62	0x0	0x6	AX	4
.fini	PROGBITS	0x8000bb0a	0xbb0a	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x8000bb18	0xbb18	0xd66	0x0	0x2	A	2
.eh_frame	PROGBITS	0x8000c880	0xc880	0x4	0x0	0x2	A	4
.ctors	PROGBITS	0x8000e884	0xc884	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8000e88c	0xc88c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8000e898	0xc898	0x2cc	0x0	0x3	WA	4
.bss	NOBITS	0x8000eb64	0xcb64	0x4268	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0xcb64	0x48	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0xc884	0xc884	6.2154	0x5	R E	0x2000	.init .text .fini .rodata .eh_frame
LOAD	0xc884	0x8000e884	0x8000e884	0x2e0	0x4548	3.7864	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 15:20:12.733625889 CEST	33236	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:12.738574028 CEST	80	33236	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:12.738662958 CEST	33236	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:12.739125967 CEST	33236	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:12.744198084 CEST	80	33236	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:13.207488060 CEST	80	33236	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:13.207701921 CEST	33236	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:13.207932949 CEST	80	33236	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:13.208137035 CEST	33236	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:13.213160038 CEST	80	33236	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:16.012104034 CEST	33238	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:16.016916037 CEST	80	33238	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:16.016982079 CEST	33238	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:16.016982079 CEST	33238	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:16.021862984 CEST	80	33238	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:16.491498947 CEST	80	33238	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:16.491595984 CEST	33238	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:16.491720915 CEST	80	33238	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:16.491821051 CEST	33238	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:16.496619940 CEST	80	33238	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:24.164483070 CEST	33240	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:24.169411898 CEST	80	33240	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:24.169460058 CEST	33240	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:24.169472933 CEST	33240	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:24.174345016 CEST	80	33240	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:24.634650946 CEST	80	33240	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:24.634699106 CEST	80	33240	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:24.634711027 CEST	33240	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:24.634747028 CEST	33240	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:24.639635086 CEST	80	33240	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:27.868274927 CEST	33242	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:27.873116016 CEST	80	33242	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:27.873172045 CEST	33242	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:27.873183966 CEST	33242	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:27.878171921 CEST	80	33242	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:28.358407974 CEST	80	33242	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:28.358477116 CEST	33242	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:28.358551979 CEST	80	33242	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:28.358618975 CEST	33242	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:28.363545895 CEST	80	33242	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:35.147073984 CEST	33244	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:35.152446985 CEST	80	33244	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:35.152632952 CEST	33244	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:35.152632952 CEST	33244	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:35.157624006 CEST	80	33244	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:35.626770020 CEST	80	33244	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:35.626890898 CEST	80	33244	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:35.627183914 CEST	33244	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:35.627183914 CEST	33244	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:35.632370949 CEST	80	33244	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:47.977319956 CEST	33246	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:47.982330084 CEST	80	33246	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:47.982561111 CEST	33246	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:47.982733011 CEST	33246	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:47.987950087 CEST	80	33246	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:48.468452930 CEST	80	33246	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:48.468508005 CEST	80	33246	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:48.468777895 CEST	33246	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:48.468777895 CEST	33246	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:48.473948956 CEST	80	33246	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:56.118865013 CEST	33248	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:56.124912024 CEST	80	33248	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:56.125334024 CEST	33248	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:56.125334978 CEST	33248	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:56.130840063 CEST	80	33248	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:56.594367027 CEST	80	33248	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:56.594444036 CEST	80	33248	199.59.243.227	192.168.2.15
Oct 13, 2024 15:20:56.594753981 CEST	33248	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:56.594753981 CEST	33248	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:20:56.600481987 CEST	80	33248	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:03.460895061 CEST	33250	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:03.467215061 CEST	80	33250	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:03.467502117 CEST	33250	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:03.467940092 CEST	33250	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:03.473383904 CEST	80	33250	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:03.932245016 CEST	80	33250	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:03.932872057 CEST	33250	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:03.932878971 CEST	80	33250	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:03.933172941 CEST	33250	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:03.940284014 CEST	80	33250	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:16.589624882 CEST	33252	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:16.594806910 CEST	80	33252	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:16.595109940 CEST	33252	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:16.595110893 CEST	33252	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:16.600393057 CEST	80	33252	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:17.070977926 CEST	80	33252	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:17.071518898 CEST	33252	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:17.071706057 CEST	80	33252	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:17.072153091 CEST	33252	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:17.077712059 CEST	80	33252	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:29.449690104 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:29.455117941 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:29.455697060 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:29.455697060 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:29.461035967 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:30.123219013 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:30.123300076 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:30.123332024 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:30.123554945 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:30.123555899 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:30.123555899 CEST	33254	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:30.129796028 CEST	80	33254	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:42.423312902 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:42.428874969 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:42.429219007 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:42.429311037 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:42.434729099 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:42.954287052 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:42.954366922 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:42.954843998 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:42.954966068 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:42.960490942 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:44.975977898 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:44.981698036 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:44.982013941 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:44.982014894 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:44.987472057 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:45.447509050 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:45.447580099 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:45.447997093 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:45.448311090 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:45.453520060 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:47.105386019 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:47.110694885 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:47.111104965 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:47.111104965 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:47.116579056 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:47.576750994 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:47.576868057 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:47.577181101 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:47.577317953 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:47.582325935 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:54.374818087 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:54.380271912 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:54.380520105 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:54.380520105 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:54.386069059 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:54.867661953 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:54.867718935 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:21:54.867969036 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:54.867969036 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:21:54.873594999 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:02.040595055 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:02.046487093 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:02.046981096 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:02.046981096 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:02.052917957 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:02.549803972 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:02.549912930 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:02.550349951 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:02.550477028 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:02.556245089 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:04.225398064 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:04.231055975 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:04.231533051 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:04.231534004 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:04.237473965 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:04.715601921 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:04.715663910 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:04.715967894 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:04.715967894 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:04.721682072 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:11.562525988 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:11.567931890 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:11.568249941 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:11.568453074 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:11.573713064 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:12.033526897 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:12.033574104 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:12.033958912 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:12.034233093 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:12.039622068 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:15.108795881 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:15.114794016 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:15.115080118 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:15.115232944 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:15.120409012 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:15.580712080 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:15.580785036 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:15.581336021 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:15.581336021 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:15.587023973 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:26.805838108 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:26.811455011 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:26.812062979 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:26.812062979 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:26.818044901 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:27.296231031 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:27.296308994 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:27.296768904 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:27.296768904 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:27.302392006 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:28.966418028 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:28.972088099 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:28.972667933 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:28.972667933 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:28.978262901 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:29.459117889 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:29.459353924 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:29.459707022 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:29.459707022 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:29.465636015 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:41.203217983 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:41.208625078 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:41.209053040 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:41.209115028 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:41.214728117 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:41.687182903 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:41.687228918 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:41.687892914 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:41.688008070 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:41.693075895 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:44.914364100 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:44.919533014 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:44.919646025 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:44.919696093 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:44.925199986 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:45.385503054 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:45.386049986 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:45.386110067 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:45.386624098 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:45.391952038 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:48.507694960 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:48.513351917 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:48.513521910 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:48.513634920 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:48.519114017 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:49.000250101 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:49.000334978 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:49.000617027 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:49.000658035 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:49.006849051 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:55.177841902 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:55.183743954 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:55.184040070 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:55.184608936 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:55.189682961 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:55.648462057 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:55.648492098 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:22:55.648679018 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:55.648679018 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:22:55.653944016 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:07.587776899 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:07.593018055 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:07.593287945 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:07.593652964 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:07.599088907 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:08.076783895 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:08.077207088 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:08.077496052 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:08.078238010 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:08.083524942 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:14.996515036 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:15.001934052 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:15.002026081 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:15.002186060 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:15.007705927 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:15.475733042 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:15.475794077 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:15.476095915 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:15.476181984 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:15.481616020 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:22.946382046 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:22.951972008 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:22.952306032 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:22.952426910 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:22.957776070 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:23.437787056 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:23.437844038 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:23.438344955 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:23.438344955 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:23.444291115 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:25.063446045 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:25.069015980 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:25.069536924 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:25.069670916 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:25.075261116 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:25.554204941 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:25.554275990 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:25.554943085 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:25.554943085 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:25.560647011 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:42.702202082 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:42.707520962 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:42.707669973 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:42.707856894 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:42.715085030 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:43.174345970 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:43.174407005 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:23:43.174807072 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:43.174843073 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:23:43.180114031 CEST	80	33292	199.59.243.227	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 15:20:12.009175062 CEST	59146	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:20:12.554774046 CEST	5353	59146	185.84.81.194	192.168.2.15
Oct 13, 2024 15:20:12.557292938 CEST	60288	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:20:12.565393925 CEST	53	60288	130.61.64.122	192.168.2.15
Oct 13, 2024 15:20:12.567558050 CEST	34309	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:12.577657938 CEST	53	34309	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:12.579720974 CEST	52296	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:20:12.586407900 CEST	53	52296	130.61.69.123	192.168.2.15
Oct 13, 2024 15:20:12.588852882 CEST	54837	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:20:12.685338020 CEST	53	54837	162.243.19.47	192.168.2.15
Oct 13, 2024 15:20:12.688201904 CEST	48655	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:12.694799900 CEST	53	48655	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:12.696619034 CEST	39185	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:12.703080893 CEST	53	39185	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:12.705656052 CEST	39116	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:12.712323904 CEST	53	39116	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:12.714869976 CEST	48219	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:12.721752882 CEST	53	48219	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:12.725663900 CEST	42281	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:12.731848001 CEST	53	42281	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:14.211638927 CEST	33138	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:20:14.774159908 CEST	5353	33138	185.84.81.194	192.168.2.15
Oct 13, 2024 15:20:14.775499105 CEST	38074	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:20:14.864181995 CEST	53	38074	162.243.19.47	192.168.2.15
Oct 13, 2024 15:20:14.866931915 CEST	36751	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:15.422888041 CEST	5353	36751	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:15.425492048 CEST	60042	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:20:15.961620092 CEST	5353	60042	185.84.81.194	192.168.2.15
Oct 13, 2024 15:20:15.963068962 CEST	58547	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:20:15.970072031 CEST	53	58547	130.61.64.122	192.168.2.15
Oct 13, 2024 15:20:15.973107100 CEST	40459	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:15.979660034 CEST	53	40459	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:15.981384993 CEST	59460	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:15.988156080 CEST	53	59460	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:15.989151001 CEST	56584	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:15.995480061 CEST	53	56584	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:15.997068882 CEST	55332	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:16.003365040 CEST	53	55332	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:16.005307913 CEST	34744	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:16.011538982 CEST	53	34744	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:17.555241108 CEST	58568	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:20:22.557574034 CEST	45403	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:20:23.285756111 CEST	5353	45403	161.97.219.84	192.168.2.15
Oct 13, 2024 15:20:23.286837101 CEST	51255	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:20:23.389614105 CEST	53	51255	192.3.165.37	192.168.2.15
Oct 13, 2024 15:20:23.390659094 CEST	48098	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:20:23.573923111 CEST	53	48098	161.97.219.84	192.168.2.15
Oct 13, 2024 15:20:23.576083899 CEST	59943	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:20:24.125310898 CEST	5353	59943	185.84.81.194	192.168.2.15
Oct 13, 2024 15:20:24.126185894 CEST	47923	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:24.132628918 CEST	53	47923	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:24.134468079 CEST	51928	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:24.140827894 CEST	53	51928	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:24.142136097 CEST	60845	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:24.148577929 CEST	53	60845	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:24.149785042 CEST	53442	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:24.156444073 CEST	53	53442	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:24.157366037 CEST	49079	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:24.163691998 CEST	53	49079	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:25.637773037 CEST	43697	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:20:26.155463934 CEST	5353	43697	63.231.92.27	192.168.2.15
Oct 13, 2024 15:20:26.156264067 CEST	39332	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:20:26.163300991 CEST	53	39332	130.61.69.123	192.168.2.15
Oct 13, 2024 15:20:26.164146900 CEST	46987	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:26.710753918 CEST	5353	46987	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:26.711903095 CEST	41984	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:27.274983883 CEST	5353	41984	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:27.276124954 CEST	54343	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:27.829519033 CEST	5353	54343	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:27.830410004 CEST	42758	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:27.837013006 CEST	53	42758	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:27.837848902 CEST	45946	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:27.844446898 CEST	53	45946	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:27.845253944 CEST	41549	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:27.851758003 CEST	53	41549	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:27.852571964 CEST	33968	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:27.859044075 CEST	53	33968	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:27.859919071 CEST	35839	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:27.867877007 CEST	53	35839	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:29.360203981 CEST	37411	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:20:29.897193909 CEST	5353	37411	63.231.92.27	192.168.2.15
Oct 13, 2024 15:20:29.898026943 CEST	49703	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:20:30.086218119 CEST	53	49703	161.97.219.84	192.168.2.15
Oct 13, 2024 15:20:30.087332010 CEST	57176	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:20:30.093355894 CEST	43829	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:20:35.099977016 CEST	33321	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:20:35.107491970 CEST	33506	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:35.114202976 CEST	53	33506	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:35.115128994 CEST	60933	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:35.121932030 CEST	53	60933	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:35.122787952 CEST	46912	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:35.129012108 CEST	53	46912	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:35.130069971 CEST	60283	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:35.136959076 CEST	53	60283	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:35.137825012 CEST	52789	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:35.146573067 CEST	53	52789	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:36.629807949 CEST	54739	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:20:36.816900969 CEST	53	54739	161.97.219.84	192.168.2.15
Oct 13, 2024 15:20:36.818121910 CEST	45074	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:20:37.340079069 CEST	5353	45074	161.97.219.84	192.168.2.15
Oct 13, 2024 15:20:37.341289043 CEST	51882	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:37.922421932 CEST	5353	51882	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:37.924515963 CEST	48185	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:20:42.929944992 CEST	51016	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:20:47.933871984 CEST	34696	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:47.940761089 CEST	53	34696	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:47.942141056 CEST	56234	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:47.948889971 CEST	53	56234	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:47.950993061 CEST	57001	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:47.957978010 CEST	53	57001	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:47.959940910 CEST	38629	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:47.967488050 CEST	53	38629	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:47.969062090 CEST	38864	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:47.976128101 CEST	53	38864	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:49.473457098 CEST	52580	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:20:49.480870008 CEST	53	52580	130.61.64.122	192.168.2.15
Oct 13, 2024 15:20:49.482984066 CEST	40066	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:20:54.485965014 CEST	44791	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:55.034660101 CEST	5353	44791	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:55.038383007 CEST	58016	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:20:55.514370918 CEST	5353	58016	192.3.165.37	192.168.2.15
Oct 13, 2024 15:20:55.517925024 CEST	56323	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:20:56.064718008 CEST	5353	56323	116.203.104.203	192.168.2.15
Oct 13, 2024 15:20:56.068679094 CEST	46634	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:56.076025009 CEST	53	46634	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:56.079694033 CEST	50958	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:56.086436987 CEST	53	50958	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:56.089534998 CEST	58166	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:56.096339941 CEST	53	58166	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:56.099265099 CEST	56927	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:56.106506109 CEST	53	56927	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:56.109299898 CEST	45936	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:20:56.116547108 CEST	53	45936	8.8.8.8	192.168.2.15
Oct 13, 2024 15:20:57.599843025 CEST	47658	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:20:57.745347977 CEST	53	47658	63.231.92.27	192.168.2.15
Oct 13, 2024 15:20:57.749759912 CEST	51204	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:21:02.757515907 CEST	60654	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:21:02.765136003 CEST	53	60654	130.61.69.123	192.168.2.15
Oct 13, 2024 15:21:02.768205881 CEST	44183	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:21:02.861073971 CEST	53	44183	162.243.19.47	192.168.2.15
Oct 13, 2024 15:21:02.864105940 CEST	49625	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:03.411750078 CEST	5353	49625	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:03.414983988 CEST	43903	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:03.422143936 CEST	53	43903	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:03.424467087 CEST	56145	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:03.431188107 CEST	53	56145	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:03.433604002 CEST	49545	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:03.440568924 CEST	53	49545	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:03.442838907 CEST	47904	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:03.449702024 CEST	53	47904	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:03.451941967 CEST	34132	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:03.458823919 CEST	53	34132	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:04.938792944 CEST	46300	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:05.446651936 CEST	5353	46300	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:05.451594114 CEST	46637	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:21:06.001101971 CEST	5353	46637	185.84.81.194	192.168.2.15
Oct 13, 2024 15:21:06.005420923 CEST	52028	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:21:11.010633945 CEST	39213	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:21:16.019876957 CEST	50402	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:21:16.538630962 CEST	5353	50402	63.231.92.27	192.168.2.15
Oct 13, 2024 15:21:16.542464018 CEST	33480	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:16.549866915 CEST	53	33480	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:16.552679062 CEST	49748	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:16.559978962 CEST	53	49748	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:16.562087059 CEST	59832	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:16.569118977 CEST	53	59832	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:16.571367979 CEST	33220	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:16.578269005 CEST	53	33220	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:16.580543041 CEST	48851	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:16.587588072 CEST	53	48851	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:18.080101967 CEST	39030	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:18.269309044 CEST	53	39030	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:18.273619890 CEST	38217	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:18.827440023 CEST	5353	38217	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:18.830549955 CEST	56594	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:21:23.838591099 CEST	59525	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:21:28.846560001 CEST	34389	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:29.396680117 CEST	5353	34389	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:29.399478912 CEST	50083	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:29.407002926 CEST	53	50083	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:29.409420013 CEST	44963	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:29.416786909 CEST	53	44963	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:29.420310974 CEST	50996	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:29.427417040 CEST	53	50996	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:29.430805922 CEST	33631	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:29.437786102 CEST	53	33631	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:29.440413952 CEST	42421	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:29.447536945 CEST	53	42421	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:31.130911112 CEST	58862	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:31.639817953 CEST	5353	58862	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:31.643987894 CEST	59592	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:21:36.652532101 CEST	56912	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:36.838845968 CEST	53	56912	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:36.841118097 CEST	44134	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:21:41.846127033 CEST	58666	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:42.367345095 CEST	5353	58666	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:42.372215986 CEST	34919	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:42.379482031 CEST	53	34919	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:42.382761955 CEST	38727	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:42.390311003 CEST	53	38727	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:42.394057035 CEST	43878	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:42.401670933 CEST	53	43878	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:42.404213905 CEST	32885	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:42.411047935 CEST	53	32885	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:42.413912058 CEST	60346	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:42.421423912 CEST	53	60346	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:43.963422060 CEST	59871	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:21:44.054251909 CEST	53	59871	162.243.19.47	192.168.2.15
Oct 13, 2024 15:21:44.058300018 CEST	41180	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:44.603828907 CEST	5353	41180	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:44.608220100 CEST	33708	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:44.796536922 CEST	53	33708	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:44.801242113 CEST	47761	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:21:44.901796103 CEST	53	47761	192.3.165.37	192.168.2.15
Oct 13, 2024 15:21:44.905775070 CEST	54744	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:44.917972088 CEST	53	54744	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:44.921118021 CEST	56379	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:44.928829908 CEST	53	56379	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:44.932559013 CEST	32993	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:44.939938068 CEST	53	32993	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:44.944197893 CEST	60246	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:44.951659918 CEST	53	60246	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:44.955003977 CEST	58757	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:44.962228060 CEST	53	58757	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:44.966675043 CEST	44791	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:44.973809958 CEST	53	44791	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:46.453128099 CEST	47837	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:46.641083956 CEST	53	47837	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:46.645730019 CEST	55256	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:46.834670067 CEST	53	55256	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:46.838437080 CEST	48355	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:46.848968029 CEST	53	48355	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:46.852828026 CEST	59793	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:46.863265991 CEST	53	59793	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:46.867031097 CEST	38654	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:21:47.048825979 CEST	53	38654	161.97.219.84	192.168.2.15
Oct 13, 2024 15:21:47.053483009 CEST	49650	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:47.060801029 CEST	53	49650	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:47.063697100 CEST	43798	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:47.070801973 CEST	53	43798	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:47.074274063 CEST	44777	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:47.081397057 CEST	53	44777	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:47.084768057 CEST	41499	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:47.092293978 CEST	53	41499	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:47.095830917 CEST	55309	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:47.103359938 CEST	53	55309	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:48.583947897 CEST	37214	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:21:53.589381933 CEST	58040	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:21:53.597049952 CEST	53	58040	130.61.64.122	192.168.2.15
Oct 13, 2024 15:21:53.600903988 CEST	60199	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:21:53.608527899 CEST	53	60199	130.61.64.122	192.168.2.15
Oct 13, 2024 15:21:53.611603975 CEST	37531	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:21:54.175578117 CEST	5353	37531	116.203.104.203	192.168.2.15
Oct 13, 2024 15:21:54.178843975 CEST	33346	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:21:54.325944901 CEST	53	33346	63.231.92.27	192.168.2.15
Oct 13, 2024 15:21:54.329027891 CEST	39016	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:54.336061954 CEST	53	39016	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:54.338223934 CEST	35257	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:54.345504045 CEST	53	35257	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:54.347733021 CEST	44220	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:54.354769945 CEST	53	44220	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:54.356815100 CEST	41304	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:54.364118099 CEST	53	41304	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:54.366063118 CEST	56108	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:21:54.373249054 CEST	53	56108	8.8.8.8	192.168.2.15
Oct 13, 2024 15:21:55.873435020 CEST	51653	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:21:55.881105900 CEST	59641	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:21:55.889075041 CEST	47377	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:22:00.898416996 CEST	43800	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:22:01.413172960 CEST	5353	43800	63.231.92.27	192.168.2.15
Oct 13, 2024 15:22:01.417145014 CEST	58294	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:01.983613968 CEST	5353	58294	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:01.988173008 CEST	53328	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:01.995275021 CEST	53	53328	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:01.998477936 CEST	56912	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:02.006488085 CEST	53	56912	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:02.009963036 CEST	56663	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:02.017127037 CEST	53	56663	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:02.020329952 CEST	47014	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:02.027446985 CEST	53	47014	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:02.031193018 CEST	34918	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:02.038199902 CEST	53	34918	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:03.556592941 CEST	50366	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:22:03.656272888 CEST	53	50366	192.3.165.37	192.168.2.15
Oct 13, 2024 15:22:03.660784960 CEST	35223	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:22:03.669794083 CEST	59548	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:22:03.677505016 CEST	53	59548	130.61.64.122	192.168.2.15
Oct 13, 2024 15:22:03.680931091 CEST	60370	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:03.691715956 CEST	53	60370	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:03.695825100 CEST	57499	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:22:04.171467066 CEST	5353	57499	192.3.165.37	192.168.2.15
Oct 13, 2024 15:22:04.175458908 CEST	60082	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:04.182804108 CEST	53	60082	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:04.185497999 CEST	58738	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:04.192512035 CEST	53	58738	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:04.195449114 CEST	57875	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:04.203109026 CEST	53	57875	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:04.205442905 CEST	49314	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:04.212620020 CEST	53	49314	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:04.215266943 CEST	51032	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:04.222841024 CEST	53	51032	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:05.721884012 CEST	40938	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:06.278743982 CEST	5353	40938	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:06.283150911 CEST	45195	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:22:11.290380955 CEST	52923	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:11.303136110 CEST	53	52923	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:11.306600094 CEST	34784	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:11.317640066 CEST	53	34784	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:11.321098089 CEST	47523	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:11.508703947 CEST	53	47523	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:11.512054920 CEST	40993	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:11.519560099 CEST	53	40993	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:11.522243023 CEST	44668	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:11.529850006 CEST	53	44668	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:11.532708883 CEST	47436	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:11.539844990 CEST	53	47436	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:11.542835951 CEST	48694	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:11.550328970 CEST	53	48694	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:11.553153992 CEST	44368	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:11.560602903 CEST	53	44368	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:13.041583061 CEST	46811	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:13.579255104 CEST	5353	46811	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:13.583209038 CEST	37916	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:13.772486925 CEST	53	37916	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:13.776555061 CEST	50274	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:14.328660011 CEST	5353	50274	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:14.332870007 CEST	58114	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:14.861325026 CEST	5353	58114	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:14.864531994 CEST	39330	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:15.051561117 CEST	53	39330	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:15.056201935 CEST	48586	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:15.063065052 CEST	53	48586	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:15.066463947 CEST	53341	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:15.073726892 CEST	53	53341	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:15.077768087 CEST	38380	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:15.085043907 CEST	53	38380	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:15.089226961 CEST	52554	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:15.096389055 CEST	53	52554	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:15.099447012 CEST	38938	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:15.106261969 CEST	53	38938	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:16.590001106 CEST	42520	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:22:21.599283934 CEST	34667	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:22:26.609090090 CEST	52026	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:22:26.713485956 CEST	53	52026	192.3.165.37	192.168.2.15
Oct 13, 2024 15:22:26.718348026 CEST	51820	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:26.728988886 CEST	53	51820	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:26.733175993 CEST	43519	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:26.743628025 CEST	53	43519	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:26.747500896 CEST	41420	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:26.754626036 CEST	53	41420	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:26.758706093 CEST	48232	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:26.766042948 CEST	53	48232	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:26.769633055 CEST	33825	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:26.776952982 CEST	53	33825	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:26.780504942 CEST	59440	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:26.787724972 CEST	53	59440	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:26.791312933 CEST	40646	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:26.802367926 CEST	53	40646	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:28.304404020 CEST	54936	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:28.315496922 CEST	53	54936	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:28.319478035 CEST	53913	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:28.330008030 CEST	53	53913	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:28.333273888 CEST	39973	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:28.343550920 CEST	53	39973	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:28.347352028 CEST	35955	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:22:28.893917084 CEST	5353	35955	63.231.92.27	192.168.2.15
Oct 13, 2024 15:22:28.898509026 CEST	38281	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:28.909300089 CEST	53	38281	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:28.912777901 CEST	35946	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:28.920125961 CEST	53	35946	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:28.923887968 CEST	54104	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:28.931370020 CEST	53	54104	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:28.935276985 CEST	40047	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:28.942470074 CEST	53	40047	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:28.945879936 CEST	44459	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:28.953336954 CEST	53	44459	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:28.956744909 CEST	40336	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:28.963717937 CEST	53	40336	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:30.465939999 CEST	48643	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:22:35.474924088 CEST	35199	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:22:40.484091043 CEST	45520	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:22:40.588582039 CEST	53	45520	192.3.165.37	192.168.2.15
Oct 13, 2024 15:22:40.593110085 CEST	56653	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:40.606961012 CEST	53	56653	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:40.610667944 CEST	47679	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:41.152904987 CEST	5353	47679	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:41.155441046 CEST	51679	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:41.162795067 CEST	53	51679	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:41.164690018 CEST	35582	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:41.171524048 CEST	53	35582	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:41.174043894 CEST	41128	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:41.181276083 CEST	53	41128	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:41.183799028 CEST	43227	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:41.190799952 CEST	53	43227	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:41.192771912 CEST	59050	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:41.201556921 CEST	53	59050	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:42.696531057 CEST	33994	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:22:42.800071001 CEST	53	33994	192.3.165.37	192.168.2.15
Oct 13, 2024 15:22:42.805073977 CEST	60899	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:43.361447096 CEST	5353	60899	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:43.365427017 CEST	36587	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:44.111459970 CEST	5353	36587	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:44.114476919 CEST	37298	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:44.668869972 CEST	5353	37298	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:44.672921896 CEST	60487	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:44.861949921 CEST	53	60487	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:44.864696026 CEST	35153	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:44.872030973 CEST	53	35153	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:44.874658108 CEST	56291	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:44.881692886 CEST	53	56291	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:44.885502100 CEST	33308	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:44.892473936 CEST	53	33308	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:44.895054102 CEST	36014	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:44.902422905 CEST	53	36014	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:44.905756950 CEST	55984	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:44.912816048 CEST	53	55984	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:46.392729044 CEST	59685	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:46.403023958 CEST	53	59685	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:46.405175924 CEST	44440	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:47.687433004 CEST	5353	44440	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:47.691555023 CEST	59199	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:22:47.699188948 CEST	53	59199	130.61.64.122	192.168.2.15
Oct 13, 2024 15:22:47.702126026 CEST	40928	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:48.272383928 CEST	5353	40928	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:48.275105953 CEST	58205	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:48.460658073 CEST	53	58205	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:48.462992907 CEST	51620	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:48.470659018 CEST	53	51620	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:48.472557068 CEST	41644	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:48.479382038 CEST	53	41644	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:48.481456041 CEST	52236	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:48.488410950 CEST	53	52236	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:48.490569115 CEST	52905	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:48.497345924 CEST	53	52905	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:48.499345064 CEST	41107	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:48.506506920 CEST	53	41107	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:50.005887985 CEST	60033	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:22:50.066550970 CEST	53	60033	130.61.69.123	192.168.2.15
Oct 13, 2024 15:22:50.069309950 CEST	52048	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:22:50.076658964 CEST	53	52048	130.61.69.123	192.168.2.15
Oct 13, 2024 15:22:50.078715086 CEST	39256	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:22:55.086363077 CEST	42125	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:22:55.097287893 CEST	53	42125	185.84.81.194	192.168.2.15
Oct 13, 2024 15:22:55.103751898 CEST	58965	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:22:55.111320972 CEST	53	58965	130.61.69.123	192.168.2.15
Oct 13, 2024 15:22:55.117448092 CEST	53301	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:55.124399900 CEST	53	53301	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:55.129940987 CEST	36126	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:55.136578083 CEST	53	36126	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:55.143244982 CEST	33090	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:55.150316000 CEST	53	33090	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:55.154961109 CEST	59709	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:55.162339926 CEST	53	59709	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:55.168556929 CEST	49288	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:22:55.175488949 CEST	53	49288	8.8.8.8	192.168.2.15
Oct 13, 2024 15:22:55.460000992 CEST	59159	53	192.168.2.15	1.1.1.1
Oct 13, 2024 15:22:55.460134983 CEST	57593	53	192.168.2.15	1.1.1.1
Oct 13, 2024 15:22:55.468775988 CEST	53	57593	1.1.1.1	192.168.2.15
Oct 13, 2024 15:22:55.468846083 CEST	53	59159	1.1.1.1	192.168.2.15
Oct 13, 2024 15:22:56.657768011 CEST	37553	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:22:57.235672951 CEST	5353	37553	116.203.104.203	192.168.2.15
Oct 13, 2024 15:22:57.239259958 CEST	50289	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:22:57.425115108 CEST	53	50289	161.97.219.84	192.168.2.15
Oct 13, 2024 15:22:57.429979086 CEST	55671	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:22:57.522427082 CEST	53	55671	162.243.19.47	192.168.2.15
Oct 13, 2024 15:22:57.526210070 CEST	49393	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:23:02.533443928 CEST	43784	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:23:07.541582108 CEST	33446	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:07.549078941 CEST	53	33446	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:07.551188946 CEST	59709	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:07.558572054 CEST	53	59709	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:07.560864925 CEST	33743	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:07.568046093 CEST	53	33743	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:07.570267916 CEST	45919	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:07.577034950 CEST	53	45919	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:07.578933001 CEST	51630	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:07.585859060 CEST	53	51630	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:09.084745884 CEST	46633	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:23:09.637341976 CEST	5353	46633	185.84.81.194	192.168.2.15
Oct 13, 2024 15:23:09.641072989 CEST	45056	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:23:09.652477026 CEST	53	45056	116.203.104.203	192.168.2.15
Oct 13, 2024 15:23:09.655395985 CEST	33075	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:23:09.749325991 CEST	53	33075	162.243.19.47	192.168.2.15
Oct 13, 2024 15:23:09.752506018 CEST	55444	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:23:09.939049959 CEST	53	55444	161.97.219.84	192.168.2.15
Oct 13, 2024 15:23:09.942600012 CEST	54461	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:23:14.947993040 CEST	34294	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:14.955199957 CEST	53	34294	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:14.958148003 CEST	41584	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:14.965228081 CEST	53	41584	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:14.968099117 CEST	41457	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:14.975614071 CEST	53	41457	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:14.978068113 CEST	45892	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:14.985064983 CEST	53	45892	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:14.988334894 CEST	34060	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:14.995271921 CEST	53	34060	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:16.482363939 CEST	46735	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:23:16.665571928 CEST	53	46735	161.97.219.84	192.168.2.15
Oct 13, 2024 15:23:16.669476032 CEST	49994	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:23:17.225752115 CEST	5353	49994	116.203.104.203	192.168.2.15
Oct 13, 2024 15:23:17.228610992 CEST	50441	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:23:17.324938059 CEST	53	50441	192.3.165.37	192.168.2.15
Oct 13, 2024 15:23:17.328562975 CEST	56618	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:23:22.337513924 CEST	59023	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:23:22.887193918 CEST	5353	59023	116.203.104.203	192.168.2.15
Oct 13, 2024 15:23:22.892039061 CEST	55682	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:22.899269104 CEST	53	55682	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:22.902909994 CEST	50153	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:22.910007000 CEST	53	50153	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:22.913808107 CEST	36499	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:22.921093941 CEST	53	36499	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:22.924962044 CEST	51824	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:22.932384014 CEST	53	51824	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:22.936144114 CEST	53528	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:22.943357944 CEST	53	53528	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:24.446544886 CEST	44179	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:23:24.593981981 CEST	53	44179	63.231.92.27	192.168.2.15
Oct 13, 2024 15:23:24.598890066 CEST	49366	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:23:24.787158966 CEST	53	49366	161.97.219.84	192.168.2.15
Oct 13, 2024 15:23:24.791735888 CEST	45158	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:23:24.799216032 CEST	53	45158	130.61.64.122	192.168.2.15
Oct 13, 2024 15:23:24.802320004 CEST	47982	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:23:24.990976095 CEST	53	47982	161.97.219.84	192.168.2.15
Oct 13, 2024 15:23:24.995944023 CEST	36205	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:23:25.007617950 CEST	53	36205	185.84.81.194	192.168.2.15
Oct 13, 2024 15:23:25.011440039 CEST	39210	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:25.018462896 CEST	53	39210	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:25.021575928 CEST	39580	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:25.028768063 CEST	53	39580	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:25.032264948 CEST	52527	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:25.039690018 CEST	53	52527	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:25.043029070 CEST	40240	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:25.049940109 CEST	53	40240	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:25.053091049 CEST	59914	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:25.060570002 CEST	53	59914	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:26.563092947 CEST	44040	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:23:27.095236063 CEST	5353	44040	63.231.92.27	192.168.2.15
Oct 13, 2024 15:23:27.099636078 CEST	55983	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:23:32.107992887 CEST	44284	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:23:32.628118992 CEST	5353	44284	63.231.92.27	192.168.2.15
Oct 13, 2024 15:23:32.630902052 CEST	55165	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:23:37.639453888 CEST	42283	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:23:42.646183968 CEST	47607	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:42.653645039 CEST	53	47607	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:42.655786037 CEST	45052	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:42.665961981 CEST	53	45052	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:42.668077946 CEST	56167	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:42.677546978 CEST	53	56167	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:42.679754019 CEST	55007	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:42.689173937 CEST	53	55007	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:42.691284895 CEST	52160	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:23:42.700687885 CEST	53	52160	8.8.8.8	192.168.2.15
Oct 13, 2024 15:23:44.178890944 CEST	40338	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:23:44.271476984 CEST	53	40338	162.243.19.47	192.168.2.15
Oct 13, 2024 15:23:44.273427010 CEST	55685	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:23:44.966806889 CEST	5353	55685	116.203.104.203	192.168.2.15
Oct 13, 2024 15:23:44.969597101 CEST	46473	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:23:45.154051065 CEST	53	46473	161.97.219.84	192.168.2.15
Oct 13, 2024 15:23:45.159188986 CEST	51050	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:23:45.168267012 CEST	53072	5353	192.168.2.15	130.61.64.122

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 15:20:30.092649937 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:20:35.106195927 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:21:55.879108906 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:21:55.886809111 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:22:03.666748047 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:23:45.164877892 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 15:22:55.460000992 CEST	192.168.2.15	1.1.1.1	0x281b	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:55.460134983 CEST	192.168.2.15	1.1.1.1	0xefa1	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 15:20:12.685338020 CEST	162.243.19.47	192.168.2.15	0xb2e3	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:20:15.970072031 CEST	130.61.64.122	192.168.2.15	0x9313	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:20:23.573923111 CEST	161.97.219.84	192.168.2.15	0x4264	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:20:26.163300991 CEST	130.61.69.123	192.168.2.15	0x27bf	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:20:57.745347977 CEST	63.231.92.27	192.168.2.15	0x62fc	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:02.861073971 CEST	162.243.19.47	192.168.2.15	0x10c9	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:44.054251909 CEST	162.243.19.47	192.168.2.15	0x3894	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:46.641083956 CEST	161.97.219.84	192.168.2.15	0x453f	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:46.834670067 CEST	161.97.219.84	192.168.2.15	0x824b	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:46.863265991 CEST	116.203.104.203	192.168.2.15	0x9bb9	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:21:53.608527899 CEST	130.61.64.122	192.168.2.15	0xd2d1	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:03.677505016 CEST	130.61.64.122	192.168.2.15	0x43d	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:03.691715956 CEST	185.84.81.194	192.168.2.15	0xaeb6	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:11.317640066 CEST	185.84.81.194	192.168.2.15	0x8937	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:15.051561117 CEST	161.97.219.84	192.168.2.15	0xd42c	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:26.713485956 CEST	192.3.165.37	192.168.2.15	0xd2cd	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:26.743628025 CEST	185.84.81.194	192.168.2.15	0x2fae	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:28.343550920 CEST	116.203.104.203	192.168.2.15	0x6068	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:40.588582039 CEST	192.3.165.37	192.168.2.15	0x2995	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:42.800071001 CEST	192.3.165.37	192.168.2.15	0x3305	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:50.076658964 CEST	130.61.69.123	192.168.2.15	0xec8a	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:55.468846083 CEST	1.1.1.1	192.168.2.15	0x281b	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:22:55.468846083 CEST	1.1.1.1	192.168.2.15	0x281b	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:23:25.007617950 CEST	185.84.81.194	192.168.2.15	0x306a	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.15	33236	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:12.739125967 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:13.207488060 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.15	33238	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:16.016982079 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:16.491498947 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.15	33240	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:24.169472933 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:24.634650946 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.15	33242	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:27.873183966 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:28.358407974 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.15	33244	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:35.152632952 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:35.626770020 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.15	33246	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:47.982733011 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:48.468452930 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.15	33248	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:20:56.125334978 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:20:56.594367027 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.15	33250	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:03.467940092 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:03.932245016 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.15	33252	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:16.595110893 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:17.070977926 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.15	33254	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:29.455697060 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:30.123219013 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.15	33256	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:42.429311037 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:42.954287052 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.15	33258	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:44.982014894 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:45.447509050 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.15	33260	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:47.111104965 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:47.576750994 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.15	33262	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:21:54.380520105 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:21:54.867661953 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.15	33264	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:02.046981096 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:02.549803972 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.15	33266	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:04.231534004 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:04.715601921 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.15	33268	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:11.568453074 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:12.033526897 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.15	33270	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:15.115232944 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:15.580712080 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.15	33272	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:26.812062979 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:27.296231031 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.15	33274	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:28.972667933 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:29.459117889 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.15	33276	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:41.209115028 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:41.687182903 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.15	33278	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:44.919696093 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:45.385503054 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.15	33280	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:48.513634920 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:49.000250101 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.15	33282	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:22:55.184608936 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:22:55.648462057 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.15	33284	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:23:07.593652964 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:23:08.076783895 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.15	33286	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:23:15.002186060 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:23:15.475733042 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.15	33288	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:23:22.952426910 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:23:23.437787056 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.15	33290	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:23:25.069670916 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:23:25.554204941 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.15	33292	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:23:42.707856894 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:23:43.174345970 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

System Behavior

Analysis Process: na.elf PID: 5538, Parent PID: 5456

General

Start time (UTC):	13:20:09
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: na.elf PID: 5540, Parent PID: 5538

General

Start time (UTC):	13:20:10
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: na.elf PID: 5542, Parent PID: 5538

General

Start time (UTC):	13:20:10
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

Spreading

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: na.elf PID: 5538, Parent PID: 5456

General

Chronological Activities

Analysis Process: na.elf PID: 5540, Parent PID: 5538

General

Chronological Activities

Analysis Process: na.elf PID: 5542, Parent PID: 5538

General

Chronological Activities

Linux Analysis Report
na.elf