Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1532527
MD5:	6a5b750f9f35348ced5d641013c45faf
SHA1:	c905e50829ff94c91e78ad541592d1d2af672c5a
SHA256:	0069d1eb1edc8027da14ca7ce9e3d1448688c624a26ec87ee607d48655d784c6
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Deletes system log files

Sample tries to access files in /etc/config/ (typical for OpenWRT routers)

Creates hidden files and/or directories

Found strings indicative of a multi-platform dropper

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532527
Start date and time:	2024-10-13 15:37:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal56.evad.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/na.elf
PID:	5854
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	thIs wEek on xLaB lEarNs nOthinG xd
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5854, Parent: 5779, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5856, Parent: 5854)

na.elf New Fork (PID: 5858, Parent: 5854)

na.elf New Fork (PID: 5860, Parent: 5854)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 18%

Source: na.elf	String: ash\|login\|wget\|curl\|tftp\|ntpdate
Source: na.elf	String: N^Nu/proc/ash\|login\|wget\|curl\|tftp\|ntpdate/fdsocket\|proc/usr/bin/usr/sbin/system/mnt/mtd/app/org/z/zbin/home/app/dvr/bin/duksan/userfs/mnt/app/usr/etc/dvr/main/usr/local/var/bin/tmp/sqfs/z/bin/dvr/mnt/mtd/zconf/gm/bin/home/process/var/challenge/usr/lib/lib/systemd//usr/lib/systemd/system/system/bin//mnt//home/helper/home/davinci/usr/libexec//sbin//proc/net/tcp/proc./.ffdfd/maps/lib/h/proc/self/exe

Source: /tmp/na.elf (PID: 5854)

Socket: 127.0.0.1:1234

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.59.243.227

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.evad.linELF@0/0@2/0

Data Obfuscation

Sample tries to access files in /etc/config/ (typical for OpenWRT routers)

Source: /tmp/na.elf (PID: 5858)

File: /etc/config

Jump to behavior

Source: /tmp/na.elf (PID: 5858)	Directory: /root/.cache	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /root/.ssh	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /root/.config	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /root/.local	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/na.elf (PID: 5858)	Directory: /etc/.java	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Deletes system log files

Source: /tmp/na.elf (PID: 5858)

Log files deleted: /var/log/kern.log

Jump to behavior

Source: /tmp/na.elf (PID: 5854)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5854.1.00007fff8a7a2000.00007fff8a7c3000.rw-.sdmp	Binary or memory string: X2*)x86_64/usr/bin/qemu-m68k/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5854.1.000055d2bf2d0000.000055d2bf355000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: na.elf, 5854.1.00007fff8a7a2000.00007fff8a7c3000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: na.elf, 5854.1.000055d2bf2d0000.000055d2bf355000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	1 Hidden Files and Directories	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Indicator Removal	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	18%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
daisy.ubuntu.com	0%	Virustotal		Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
199.59.243.227	unknown	United States		395082	BODIS-NJUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
199.59.243.227	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	myweatherradar.org/_tr
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	www.personal-loans-jp8.xyz/slxf/
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	pleasantcover.net/index.php
	4wwi2Lh5W4.exe	Get hash	malicious	Unknown	Browse	returncomplete.net/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	na.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	arm6.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BODIS-NJUS	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	199.59.243.205
	na.elf	Get hash	malicious	Unknown	Browse	199.59.243.227
	na.elf	Get hash	malicious	Unknown	Browse	199.59.243.227
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
	25XrVZw56S.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	oUc5lyEzJy.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	JUHGSyleu7.exe	Get hash	malicious	Unknown	Browse	199.59.243.227

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.211821446975417
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	54'832 bytes
MD5:	6a5b750f9f35348ced5d641013c45faf
SHA1:	c905e50829ff94c91e78ad541592d1d2af672c5a
SHA256:	0069d1eb1edc8027da14ca7ce9e3d1448688c624a26ec87ee607d48655d784c6
SHA512:	5d1a9b837bc5e65700cc81580830bd1a7327c71702c616cb4cb540c3e118be9d92d040c64639896f91e72775b0aba6f017400350e5b2142eb3bda1050cbcb5ec
SSDEEP:	1536:RnnqEtZRxytAluj3Vrd8InxaG+7/NcujI:V/tZ3ytA8t5xI719jI
TLSH:	65333AD2B500ED7EF80FE73780038909B531B355A5822B3267A7BDB79D3719449B6E82
File Content Preview:	.ELF.......................D...4...x.....4. ...(.......................P...P...... ........P...P...P......EL...... .dt.Q............................NV..a....da....LN^NuNV..J9...0f>"y...h QJ.g.X.#....hN."y...h QJ.f.A.....J.g.Hy...LN.X........0N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	54392
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0xc276	0x0	0x6	AX	4
.fini	PROGBITS	0x8000c31e	0xc31e	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x8000c32c	0xc32c	0xe20	0x0	0x2	A	2
.eh_frame	PROGBITS	0x8000d14c	0xd14c	0x4	0x0	0x2	A	4
.ctors	PROGBITS	0x8000f150	0xd150	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8000f158	0xd158	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8000f164	0xd164	0x2cc	0x0	0x3	WA	4
.bss	NOBITS	0x8000f430	0xd430	0x426c	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0xd430	0x48	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0xd150	0xd150	6.2420	0x5	R E	0x2000	.init .text .fini .rodata .eh_frame
LOAD	0xd150	0x8000f150	0x8000f150	0x2e0	0x454c	3.7664	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 15:38:56.239274025 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:38:56.244133949 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:38:56.244178057 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:38:56.244415045 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:38:56.249161005 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:38:56.742455959 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:38:56.742522001 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:38:56.742598057 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:38:56.742845058 CEST	33256	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:38:56.747584105 CEST	80	33256	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:03.010149002 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:03.015103102 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:03.015158892 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:03.015188932 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:03.020009995 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:03.488390923 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:03.488415003 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:03.488454103 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:03.488492966 CEST	33258	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:03.493429899 CEST	80	33258	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:09.740504026 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:09.745343924 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:09.745400906 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:09.745436907 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:09.750225067 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:10.218095064 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:10.218147039 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:10.218170881 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:10.218219042 CEST	33260	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:10.223011017 CEST	80	33260	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:11.616575003 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:11.621411085 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:11.621468067 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:11.621481895 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:11.626283884 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:12.086316109 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:12.086388111 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:12.086447001 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:12.086576939 CEST	33262	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:12.091377020 CEST	80	33262	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:19.646994114 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:19.651860952 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:19.651913881 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:19.651932001 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:19.658128977 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:20.136539936 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:20.136578083 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:20.136646032 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:20.136698008 CEST	33264	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:20.141524076 CEST	80	33264	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:22.419183016 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:22.424097061 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:22.424149990 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:22.424175024 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:22.429094076 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:22.888942957 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:22.889033079 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:22.889050007 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:22.889163971 CEST	33266	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:22.893980980 CEST	80	33266	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:30.208344936 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:30.213222027 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:30.213295937 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:30.213295937 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:30.218152046 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:30.696497917 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:30.696516991 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:30.696597099 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:30.696681976 CEST	33268	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:30.701699972 CEST	80	33268	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:44.024245024 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:44.029130936 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:44.029210091 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:44.029268026 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:44.034239054 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:44.498254061 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:44.498369932 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:44.499296904 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:44.499424934 CEST	33270	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:44.504364014 CEST	80	33270	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:55.853236914 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:55.858619928 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:55.858705044 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:55.859004974 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:55.864171982 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:56.342303991 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:56.342402935 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:56.342417955 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:56.342619896 CEST	33272	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:56.347778082 CEST	80	33272	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:58.560790062 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:58.566119909 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:58.566469908 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:58.566560984 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:58.571621895 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:59.030689001 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:59.030771971 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:59.030898094 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:39:59.031131029 CEST	33274	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:39:59.036067963 CEST	80	33274	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:06.773387909 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:06.778625011 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:06.779071093 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:06.779216051 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:06.784715891 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:07.253571033 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:07.253629923 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:07.253735065 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:07.254040956 CEST	33276	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:07.259582043 CEST	80	33276	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:09.089903116 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:09.095369101 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:09.095781088 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:09.095781088 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:09.101454020 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:09.561306000 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:09.561503887 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:09.561793089 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:09.561981916 CEST	33278	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:09.567159891 CEST	80	33278	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:11.591375113 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:11.596714973 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:11.596817017 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:11.597017050 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:11.602392912 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:12.093089104 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:12.093147993 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:12.093214035 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:12.093300104 CEST	33280	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:12.098678112 CEST	80	33280	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.344525099 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.350085020 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.350333929 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.350672007 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.356179953 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.872884035 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.872945070 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.872975111 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:13.873107910 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.873107910 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.873107910 CEST	33282	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:13.878875971 CEST	80	33282	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:22.553821087 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:22.559042931 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:22.559427977 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:22.559427977 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:22.565207005 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:23.029295921 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:23.029401064 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:23.029659033 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:23.029856920 CEST	33284	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:23.035316944 CEST	80	33284	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:29.685370922 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:29.690363884 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:29.690612078 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:29.690680027 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:29.695652962 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:30.164978981 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:30.165051937 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:30.165230036 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:30.165369034 CEST	33286	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:30.170222998 CEST	80	33286	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:32.968725920 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:32.974152088 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:32.974278927 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:32.974329948 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:32.979803085 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:33.468527079 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:33.468605042 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:33.469151020 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:33.469151020 CEST	33288	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:33.475038052 CEST	80	33288	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:44.829483032 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:44.834578991 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:44.834880114 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:44.834994078 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:44.839875937 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:45.301266909 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:45.301330090 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:45.301697969 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:45.301795959 CEST	33290	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:45.307061911 CEST	80	33290	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:52.499768019 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:52.505295038 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:52.505542040 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:52.505738020 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:52.511224985 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:52.999353886 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:52.999463081 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:40:52.999697924 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:52.999842882 CEST	33292	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:40:53.005072117 CEST	80	33292	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:05.343395948 CEST	33294	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:05.348727942 CEST	80	33294	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:05.349139929 CEST	33294	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:05.349253893 CEST	33294	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:05.354831934 CEST	80	33294	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:05.814471960 CEST	80	33294	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:05.814785004 CEST	80	33294	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:05.815114975 CEST	33294	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:05.815114975 CEST	33294	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:05.820713997 CEST	80	33294	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:12.601797104 CEST	33296	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:12.607443094 CEST	80	33296	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:12.607731104 CEST	33296	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:12.607768059 CEST	33296	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:12.613353014 CEST	80	33296	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:13.090962887 CEST	80	33296	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:13.091005087 CEST	80	33296	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:13.091255903 CEST	33296	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:13.091686964 CEST	33296	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:13.097071886 CEST	80	33296	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:24.835031033 CEST	33298	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:24.840759039 CEST	80	33298	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:24.841255903 CEST	33298	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:24.841367006 CEST	33298	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:24.847491980 CEST	80	33298	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:25.306749105 CEST	80	33298	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:25.307138920 CEST	80	33298	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:25.307483912 CEST	33298	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:25.307483912 CEST	33298	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:25.313585997 CEST	80	33298	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:27.700675964 CEST	33300	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:27.706425905 CEST	80	33300	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:27.706548929 CEST	33300	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:27.706593037 CEST	33300	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:27.712291002 CEST	80	33300	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:28.191231966 CEST	80	33300	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:28.191302061 CEST	80	33300	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:28.191440105 CEST	33300	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:28.191541910 CEST	33300	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:28.197200060 CEST	80	33300	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:35.470953941 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:35.476758957 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:35.477196932 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:35.482584000 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:35.488265991 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:36.045248985 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:36.045325041 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:36.045357943 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:36.045475960 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:36.045476913 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:36.045550108 CEST	33302	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:36.051214933 CEST	80	33302	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:48.642760992 CEST	33304	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:48.648133993 CEST	80	33304	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:48.648533106 CEST	33304	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:48.648533106 CEST	33304	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:48.654247046 CEST	80	33304	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:49.127418041 CEST	80	33304	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:49.127657890 CEST	80	33304	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:49.127799988 CEST	33304	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:49.128119946 CEST	33304	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:49.133944035 CEST	80	33304	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:55.804163933 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:55.810836077 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:55.810914993 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:55.810914993 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:55.816406965 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:56.452491999 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:56.452578068 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:56.452622890 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:41:56.452625036 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:56.452688932 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:56.452688932 CEST	33306	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:41:56.457818985 CEST	80	33306	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.292736053 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.298223019 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.298297882 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.298459053 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.304533005 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.808871031 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.808928967 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.808943033 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:08.809469938 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.809469938 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.809469938 CEST	33308	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:08.815419912 CEST	80	33308	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.001343966 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.006673098 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.006970882 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.007126093 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.012291908 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.525686979 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.526000023 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.526056051 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.526081085 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:15.526245117 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.526245117 CEST	33310	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:15.531501055 CEST	80	33310	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:22.755996943 CEST	33312	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:22.761267900 CEST	80	33312	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:22.761323929 CEST	33312	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:22.761363983 CEST	33312	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:22.766693115 CEST	80	33312	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:23.227483034 CEST	80	33312	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:23.227545023 CEST	80	33312	199.59.243.227	192.168.2.15
Oct 13, 2024 15:42:23.227622986 CEST	33312	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:23.227713108 CEST	33312	80	192.168.2.15	199.59.243.227
Oct 13, 2024 15:42:23.233293056 CEST	80	33312	199.59.243.227	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 15:38:49.998881102 CEST	40970	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:38:55.007685900 CEST	50688	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:38:55.570014954 CEST	5353	50688	116.203.104.203	192.168.2.15
Oct 13, 2024 15:38:55.571830988 CEST	38440	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:38:56.100215912 CEST	5353	38440	63.231.92.27	192.168.2.15
Oct 13, 2024 15:38:56.101859093 CEST	46096	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:38:56.108545065 CEST	53	46096	130.61.69.123	192.168.2.15
Oct 13, 2024 15:38:56.110294104 CEST	54838	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:38:56.198818922 CEST	53	54838	162.243.19.47	192.168.2.15
Oct 13, 2024 15:38:56.200488091 CEST	47769	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:38:56.206818104 CEST	53	47769	8.8.8.8	192.168.2.15
Oct 13, 2024 15:38:56.207703114 CEST	47963	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:38:56.213977098 CEST	53	47963	8.8.8.8	192.168.2.15
Oct 13, 2024 15:38:56.216145992 CEST	49253	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:38:56.222413063 CEST	53	49253	8.8.8.8	192.168.2.15
Oct 13, 2024 15:38:56.224400997 CEST	40556	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:38:56.230957031 CEST	53	40556	8.8.8.8	192.168.2.15
Oct 13, 2024 15:38:56.231870890 CEST	38927	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:38:56.238369942 CEST	53	38927	8.8.8.8	192.168.2.15
Oct 13, 2024 15:38:57.750459909 CEST	39101	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:38:57.854533911 CEST	53	39101	192.3.165.37	192.168.2.15
Oct 13, 2024 15:38:57.858944893 CEST	37539	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:38:57.865520000 CEST	53	37539	130.61.69.123	192.168.2.15
Oct 13, 2024 15:38:57.869924068 CEST	59512	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:39:02.872899055 CEST	44204	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:39:02.881275892 CEST	53	44204	130.61.64.122	192.168.2.15
Oct 13, 2024 15:39:02.882103920 CEST	46536	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:39:02.971586943 CEST	53	46536	162.243.19.47	192.168.2.15
Oct 13, 2024 15:39:02.972313881 CEST	40871	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:02.978540897 CEST	53	40871	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:02.979569912 CEST	45805	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:02.985860109 CEST	53	45805	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:02.987076998 CEST	32952	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:02.993191004 CEST	53	32952	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:02.994219065 CEST	46793	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:03.000422955 CEST	53	46793	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:03.003083944 CEST	51007	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:03.009747982 CEST	53	51007	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:04.490581036 CEST	36019	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:39:04.497208118 CEST	44691	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:39:09.500758886 CEST	51053	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:39:09.688337088 CEST	53	51053	161.97.219.84	192.168.2.15
Oct 13, 2024 15:39:09.689315081 CEST	60607	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:39:09.696156025 CEST	53	60607	130.61.64.122	192.168.2.15
Oct 13, 2024 15:39:09.697204113 CEST	39869	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:39:09.704009056 CEST	53	39869	130.61.64.122	192.168.2.15
Oct 13, 2024 15:39:09.705034971 CEST	45743	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:09.711421967 CEST	53	45743	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:09.712151051 CEST	46112	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:09.718893051 CEST	53	46112	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:09.719592094 CEST	48282	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:09.726366997 CEST	53	48282	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:09.727046967 CEST	35797	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:09.733211994 CEST	53	35797	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:09.733896971 CEST	57120	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:09.740155935 CEST	53	57120	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:11.220762968 CEST	60558	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:39:11.365310907 CEST	53	60558	63.231.92.27	192.168.2.15
Oct 13, 2024 15:39:11.366363049 CEST	40639	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:11.376017094 CEST	53	40639	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:11.376976013 CEST	43539	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:39:11.383045912 CEST	37120	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:39:11.570575953 CEST	53	37120	161.97.219.84	192.168.2.15
Oct 13, 2024 15:39:11.571326017 CEST	48861	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:11.581091881 CEST	53	48861	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:11.581753016 CEST	47734	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:11.588198900 CEST	53	47734	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:11.588826895 CEST	44836	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:11.595084906 CEST	53	44836	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:11.595774889 CEST	42306	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:11.602190971 CEST	53	42306	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:11.602861881 CEST	34347	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:11.609174013 CEST	53	34347	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:11.609915972 CEST	40257	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:11.616146088 CEST	53	40257	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:13.087938070 CEST	41941	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:13.098186970 CEST	53	41941	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:13.098884106 CEST	40500	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:39:13.576126099 CEST	5353	40500	192.3.165.37	192.168.2.15
Oct 13, 2024 15:39:13.577111006 CEST	36045	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:39:14.047908068 CEST	5353	36045	192.3.165.37	192.168.2.15
Oct 13, 2024 15:39:14.049068928 CEST	54099	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:14.607919931 CEST	5353	54099	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:14.608990908 CEST	36077	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:39:19.612090111 CEST	32987	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:19.618681908 CEST	53	32987	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:19.619246006 CEST	49690	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:19.625643969 CEST	53	49690	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:19.626152039 CEST	46807	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:19.632503986 CEST	53	46807	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:19.633421898 CEST	50998	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:19.639625072 CEST	53	50998	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:19.640119076 CEST	60898	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:19.646740913 CEST	53	60898	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:21.138119936 CEST	36298	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:21.148296118 CEST	53	36298	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:21.148963928 CEST	42024	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:39:21.253103971 CEST	53	42024	192.3.165.37	192.168.2.15
Oct 13, 2024 15:39:21.253884077 CEST	37943	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:39:21.259757042 CEST	42881	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:21.809009075 CEST	5353	42881	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:21.809963942 CEST	46645	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:22.380403996 CEST	5353	46645	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:22.381333113 CEST	50393	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:22.388804913 CEST	53	50393	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:22.389708042 CEST	56965	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:22.397015095 CEST	53	56965	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:22.397826910 CEST	51328	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:22.404351950 CEST	53	51328	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:22.405347109 CEST	56779	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:22.411634922 CEST	53	56779	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:22.412261963 CEST	39860	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:22.418849945 CEST	53	39860	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:23.891653061 CEST	57390	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:24.495023012 CEST	5353	57390	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:24.496301889 CEST	50789	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:39:24.966322899 CEST	5353	50789	192.3.165.37	192.168.2.15
Oct 13, 2024 15:39:24.967641115 CEST	47262	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:39:29.972925901 CEST	49550	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:39:30.157577038 CEST	53	49550	161.97.219.84	192.168.2.15
Oct 13, 2024 15:39:30.159101963 CEST	51471	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:30.169017076 CEST	53	51471	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:30.170429945 CEST	55156	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:30.176578045 CEST	53	55156	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:30.177726984 CEST	57430	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:30.184576035 CEST	53	57430	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:30.185769081 CEST	38504	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:30.192338943 CEST	53	38504	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:30.193567038 CEST	53424	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:30.200067043 CEST	53	53424	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:30.201354980 CEST	45367	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:30.207753897 CEST	53	45367	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:31.699759007 CEST	52662	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:32.253774881 CEST	5353	52662	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:32.256478071 CEST	57697	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:39:37.262253046 CEST	48500	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:38.356770039 CEST	5353	48500	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:38.357863903 CEST	36943	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:38.977853060 CEST	5353	36943	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:38.979592085 CEST	58179	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:39:43.984397888 CEST	32986	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:43.992386103 CEST	53	32986	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:43.993664980 CEST	57323	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:44.000036001 CEST	53	57323	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:44.001493931 CEST	42212	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:44.008083105 CEST	53	42212	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:44.009418964 CEST	56129	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:44.016098976 CEST	53	56129	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:44.017343044 CEST	59872	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:44.023614883 CEST	53	59872	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:45.502562046 CEST	46143	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:39:45.690685034 CEST	53	46143	161.97.219.84	192.168.2.15
Oct 13, 2024 15:39:45.692028999 CEST	57883	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:39:50.697102070 CEST	60020	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:39:50.789597034 CEST	53	60020	162.243.19.47	192.168.2.15
Oct 13, 2024 15:39:50.792076111 CEST	53943	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:39:55.796885014 CEST	38677	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:55.807920933 CEST	53	38677	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:55.810370922 CEST	54313	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:55.817414045 CEST	53	54313	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:55.819256067 CEST	40417	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:55.826133966 CEST	53	40417	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:55.828135967 CEST	59141	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:55.835135937 CEST	53	59141	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:55.836819887 CEST	52696	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:55.844099045 CEST	53	52696	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:55.845623970 CEST	41468	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:55.852372885 CEST	53	41468	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:57.348582029 CEST	43218	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:39:57.359293938 CEST	53	43218	185.84.81.194	192.168.2.15
Oct 13, 2024 15:39:57.361658096 CEST	36779	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:39:57.368871927 CEST	53	36779	130.61.69.123	192.168.2.15
Oct 13, 2024 15:39:57.370953083 CEST	47494	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:39:57.557630062 CEST	53	47494	161.97.219.84	192.168.2.15
Oct 13, 2024 15:39:57.560723066 CEST	33499	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:58.505767107 CEST	5353	33499	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:58.507193089 CEST	47623	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:39:58.517165899 CEST	53	47623	116.203.104.203	192.168.2.15
Oct 13, 2024 15:39:58.518801928 CEST	39122	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:58.525616884 CEST	53	39122	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:58.527000904 CEST	53884	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:58.533682108 CEST	53	53884	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:58.535234928 CEST	37370	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:58.541980028 CEST	53	37370	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:58.544166088 CEST	45165	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:58.551162004 CEST	53	45165	8.8.8.8	192.168.2.15
Oct 13, 2024 15:39:58.552479029 CEST	44785	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:39:58.559462070 CEST	53	44785	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:00.035834074 CEST	54105	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:40:00.128596067 CEST	53	54105	162.243.19.47	192.168.2.15
Oct 13, 2024 15:40:00.130162954 CEST	44482	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:40:00.636940956 CEST	5353	44482	161.97.219.84	192.168.2.15
Oct 13, 2024 15:40:00.638793945 CEST	36717	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:40:05.643982887 CEST	36752	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:06.173065901 CEST	5353	36752	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:06.175961971 CEST	46237	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:06.726382017 CEST	5353	46237	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:06.729109049 CEST	32815	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:06.735842943 CEST	53	32815	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:06.737699032 CEST	52592	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:06.744314909 CEST	53	52592	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:06.746189117 CEST	35417	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:06.752996922 CEST	53	35417	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:06.755291939 CEST	36262	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:06.762413025 CEST	53	36262	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:06.764642000 CEST	55231	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:06.771795034 CEST	53	55231	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:08.258934021 CEST	37808	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:40:08.266793013 CEST	53	37808	130.61.69.123	192.168.2.15
Oct 13, 2024 15:40:08.269839048 CEST	53921	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:08.837622881 CEST	5353	53921	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:08.840146065 CEST	47281	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:40:08.847558022 CEST	53	47281	130.61.69.123	192.168.2.15
Oct 13, 2024 15:40:08.849390984 CEST	38528	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:40:09.035151958 CEST	53	38528	161.97.219.84	192.168.2.15
Oct 13, 2024 15:40:09.038011074 CEST	36095	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:09.045635939 CEST	54681	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:09.052692890 CEST	53	54681	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:09.054861069 CEST	49390	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:09.061974049 CEST	53	49390	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:09.064117908 CEST	38945	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:09.071084023 CEST	53	38945	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:09.073071003 CEST	36211	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:09.080143929 CEST	53	36211	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:09.081851959 CEST	57376	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:09.088661909 CEST	53	57376	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:10.565984964 CEST	35389	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:10.577043056 CEST	53	35389	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:10.579164982 CEST	57489	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:10.586924076 CEST	54543	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:10.733630896 CEST	53	54543	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:10.735753059 CEST	38985	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:40:11.022145987 CEST	53	38985	162.243.19.47	192.168.2.15
Oct 13, 2024 15:40:11.025046110 CEST	33510	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:11.544168949 CEST	5353	33510	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:11.547373056 CEST	47234	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:11.554379940 CEST	53	47234	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:11.557914972 CEST	53745	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:11.564908028 CEST	53	53745	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:11.566660881 CEST	47798	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:11.573321104 CEST	53	47798	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:11.574831963 CEST	55029	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:11.581949949 CEST	53	55029	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:11.583455086 CEST	49756	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:11.590405941 CEST	53	49756	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:13.097321033 CEST	56511	53	192.168.2.15	130.61.69.123
Oct 13, 2024 15:40:13.105420113 CEST	53	56511	130.61.69.123	192.168.2.15
Oct 13, 2024 15:40:13.108160019 CEST	60888	53	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:13.254928112 CEST	53	60888	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:13.257898092 CEST	42958	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:13.266135931 CEST	59039	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:13.278950930 CEST	53	59039	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:13.281430960 CEST	51922	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:13.293807983 CEST	53	51922	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:13.296732903 CEST	51562	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:13.304286003 CEST	53	51562	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:13.307086945 CEST	41244	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:13.315203905 CEST	53	41244	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:13.317516088 CEST	53233	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:13.324961901 CEST	53	53233	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:13.326889992 CEST	54811	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:13.333893061 CEST	53	54811	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:13.335542917 CEST	46716	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:13.342607975 CEST	53	46716	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:14.878312111 CEST	50215	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:14.887345076 CEST	50490	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:40:15.401645899 CEST	5353	50490	161.97.219.84	192.168.2.15
Oct 13, 2024 15:40:15.405445099 CEST	37735	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:20.412308931 CEST	51355	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:21.944876909 CEST	5353	51355	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:21.948338985 CEST	36606	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:22.498286963 CEST	5353	36606	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:22.502191067 CEST	45443	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:22.509634972 CEST	53	45443	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:22.512773991 CEST	40944	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:22.519901037 CEST	53	40944	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:22.522423029 CEST	50627	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:22.529495001 CEST	53	50627	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:22.532407045 CEST	37144	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:22.541650057 CEST	53	37144	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:22.544569016 CEST	44474	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:22.551822901 CEST	53	44474	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:24.037094116 CEST	46295	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:24.049316883 CEST	53	46295	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:24.052067041 CEST	59900	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:40:24.059698105 CEST	53	59900	130.61.64.122	192.168.2.15
Oct 13, 2024 15:40:24.062597990 CEST	52172	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:24.620161057 CEST	5353	52172	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:24.623302937 CEST	60600	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:40:29.631674051 CEST	41145	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:29.642802954 CEST	53	41145	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:29.645298958 CEST	35824	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:29.652187109 CEST	53	35824	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:29.654032946 CEST	36441	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:29.660912991 CEST	53	36441	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:29.662184000 CEST	53110	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:29.669034958 CEST	53	53110	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:29.670301914 CEST	49839	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:29.676876068 CEST	53	49839	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:29.677975893 CEST	59136	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:29.684429884 CEST	53	59136	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:31.180356026 CEST	45954	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:31.872263908 CEST	5353	45954	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:31.875114918 CEST	34329	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:31.885420084 CEST	53	34329	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:31.888039112 CEST	52845	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:40:32.360014915 CEST	5353	52845	192.3.165.37	192.168.2.15
Oct 13, 2024 15:40:32.363810062 CEST	51653	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:32.374217033 CEST	53	51653	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:32.382072926 CEST	46720	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:32.915621996 CEST	5353	46720	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:32.918773890 CEST	38472	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:32.926196098 CEST	53	38472	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:32.929172039 CEST	49855	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:32.936345100 CEST	53	49855	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:32.939296961 CEST	32990	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:32.946491003 CEST	53	32990	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:32.949801922 CEST	54626	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:32.957262993 CEST	53	54626	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:32.960087061 CEST	43614	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:32.966787100 CEST	53	43614	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:34.475528955 CEST	57546	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:34.657072067 CEST	53	57546	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:34.661887884 CEST	50539	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:40:39.669586897 CEST	54257	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:40:39.762470007 CEST	53	54257	162.243.19.47	192.168.2.15
Oct 13, 2024 15:40:39.764930010 CEST	35892	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:44.771471977 CEST	58444	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:44.783970118 CEST	53	58444	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:44.786286116 CEST	57831	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:44.793092012 CEST	53	57831	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:44.795178890 CEST	59003	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:44.801690102 CEST	53	59003	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:44.803718090 CEST	39366	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:44.810556889 CEST	53	39366	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:44.812767982 CEST	56147	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:44.819196939 CEST	53	56147	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:44.821475983 CEST	44150	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:44.828330994 CEST	53	44150	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:46.306701899 CEST	40109	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:40:46.313960075 CEST	53	40109	130.61.64.122	192.168.2.15
Oct 13, 2024 15:40:46.316262007 CEST	35310	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:40:51.324537992 CEST	47288	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:40:51.335110903 CEST	53	47288	185.84.81.194	192.168.2.15
Oct 13, 2024 15:40:51.338843107 CEST	41046	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:51.894299984 CEST	5353	41046	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:51.896491051 CEST	40458	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:40:52.454123974 CEST	5353	40458	116.203.104.203	192.168.2.15
Oct 13, 2024 15:40:52.456823111 CEST	34585	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:52.463948011 CEST	53	34585	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:52.466551065 CEST	59491	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:52.473469973 CEST	53	59491	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:52.474915981 CEST	33249	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:52.481256008 CEST	53	33249	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:52.482517958 CEST	36216	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:52.489134073 CEST	53	36216	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:52.491332054 CEST	47799	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:40:52.498541117 CEST	53	47799	8.8.8.8	192.168.2.15
Oct 13, 2024 15:40:54.006074905 CEST	34963	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:40:59.011651993 CEST	38498	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:40:59.754971981 CEST	5353	38498	63.231.92.27	192.168.2.15
Oct 13, 2024 15:40:59.758721113 CEST	52887	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:40:59.765815020 CEST	53	52887	130.61.64.122	192.168.2.15
Oct 13, 2024 15:40:59.769222021 CEST	57106	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:00.285301924 CEST	5353	57106	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:00.289694071 CEST	43034	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:41:05.294958115 CEST	54227	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:05.302084923 CEST	53	54227	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:05.304512978 CEST	57078	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:05.311734915 CEST	53	57078	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:05.314547062 CEST	60184	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:05.321583986 CEST	53	60184	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:05.323949099 CEST	38462	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:05.330938101 CEST	53	38462	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:05.333673954 CEST	55836	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:05.341006041 CEST	53	55836	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:06.819608927 CEST	39063	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:07.005624056 CEST	53	39063	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:07.008407116 CEST	46071	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:41:12.015464067 CEST	53762	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:12.026360989 CEST	53	53762	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:12.028867006 CEST	50037	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:12.541388035 CEST	5353	50037	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:12.544526100 CEST	42334	53	192.168.2.15	54.36.111.116
Oct 13, 2024 15:41:12.553762913 CEST	42038	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:12.560707092 CEST	53	42038	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:12.563878059 CEST	54311	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:12.570770979 CEST	53	54311	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:12.573432922 CEST	34874	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:12.580353022 CEST	53	34874	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:12.583144903 CEST	60338	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:12.590549946 CEST	53	60338	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:12.592741966 CEST	36315	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:12.599622011 CEST	53	36315	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:14.096514940 CEST	38758	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:41:19.104221106 CEST	45771	5353	192.168.2.15	130.61.69.123
Oct 13, 2024 15:41:24.109289885 CEST	58855	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:24.120117903 CEST	53	58855	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:24.122524023 CEST	55032	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:41:24.227551937 CEST	53	55032	192.3.165.37	192.168.2.15
Oct 13, 2024 15:41:24.232840061 CEST	55364	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:24.784187078 CEST	5353	55364	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:24.786761045 CEST	41258	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:24.793761969 CEST	53	41258	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:24.795793056 CEST	53238	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:24.802890062 CEST	53	53238	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:24.804641962 CEST	48664	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:24.811603069 CEST	53	48664	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:24.815119982 CEST	33298	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:24.822426081 CEST	53	33298	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:24.825232983 CEST	53443	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:24.832309961 CEST	53	53443	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:26.312521935 CEST	53031	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:26.501560926 CEST	53	53031	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:26.504379988 CEST	43246	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:41:26.599757910 CEST	53	43246	162.243.19.47	192.168.2.15
Oct 13, 2024 15:41:26.604444981 CEST	47099	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:27.117433071 CEST	5353	47099	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:27.119729996 CEST	55370	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:27.130511999 CEST	53	55370	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:27.132365942 CEST	50987	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:27.648663998 CEST	5353	50987	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:27.653666019 CEST	38005	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:27.661048889 CEST	53	38005	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:27.663314104 CEST	45146	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:27.670558929 CEST	53	45146	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:27.672842979 CEST	52087	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:27.680224895 CEST	53	52087	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:27.682521105 CEST	46415	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:27.689650059 CEST	53	46415	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:27.692121029 CEST	42593	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:27.699176073 CEST	53	42593	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:29.198868036 CEST	49146	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:41:29.299434900 CEST	53	49146	192.3.165.37	192.168.2.15
Oct 13, 2024 15:41:29.303175926 CEST	39730	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:41:29.858225107 CEST	5353	39730	185.84.81.194	192.168.2.15
Oct 13, 2024 15:41:29.862576962 CEST	51633	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:41:33.299143076 CEST	49605	53	192.168.2.15	1.1.1.1
Oct 13, 2024 15:41:33.299283028 CEST	43147	53	192.168.2.15	1.1.1.1
Oct 13, 2024 15:41:33.306730986 CEST	53	43147	1.1.1.1	192.168.2.15
Oct 13, 2024 15:41:33.306797981 CEST	53	49605	1.1.1.1	192.168.2.15
Oct 13, 2024 15:41:34.870207071 CEST	34058	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:41:34.881418943 CEST	53	34058	185.84.81.194	192.168.2.15
Oct 13, 2024 15:41:34.884763956 CEST	45683	5353	192.168.2.15	161.97.219.84
Oct 13, 2024 15:41:35.399367094 CEST	5353	45683	161.97.219.84	192.168.2.15
Oct 13, 2024 15:41:35.405006886 CEST	46625	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:35.412281036 CEST	53	46625	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:35.416130066 CEST	38410	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:35.424112082 CEST	53	38410	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:35.428949118 CEST	47223	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:35.436017990 CEST	53	47223	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:35.439497948 CEST	48053	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:35.446815968 CEST	53	48053	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:35.455508947 CEST	51760	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:35.462658882 CEST	53	51760	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:37.052361965 CEST	39353	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:41:42.058505058 CEST	53095	5353	192.168.2.15	192.3.165.37
Oct 13, 2024 15:41:42.526063919 CEST	5353	53095	192.3.165.37	192.168.2.15
Oct 13, 2024 15:41:42.527703047 CEST	43636	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:41:47.534725904 CEST	49384	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:41:48.048264027 CEST	5353	49384	63.231.92.27	192.168.2.15
Oct 13, 2024 15:41:48.052088976 CEST	33851	5353	192.168.2.15	185.84.81.194
Oct 13, 2024 15:41:48.593235016 CEST	5353	33851	185.84.81.194	192.168.2.15
Oct 13, 2024 15:41:48.596117020 CEST	48716	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:48.603234053 CEST	53	48716	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:48.605460882 CEST	58212	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:48.612557888 CEST	53	58212	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:48.615077019 CEST	44113	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:48.621965885 CEST	53	44113	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:48.624149084 CEST	41372	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:48.630913973 CEST	53	41372	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:48.633918047 CEST	57972	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:48.641081095 CEST	53	57972	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:50.133323908 CEST	33230	53	192.168.2.15	185.84.81.194
Oct 13, 2024 15:41:50.143954039 CEST	53	33230	185.84.81.194	192.168.2.15
Oct 13, 2024 15:41:50.146384001 CEST	49026	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:50.157093048 CEST	53	49026	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:50.160373926 CEST	32850	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:50.171070099 CEST	53	32850	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:50.174127102 CEST	53314	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:41:55.180658102 CEST	44828	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:55.752707005 CEST	5353	44828	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:55.755486012 CEST	40567	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:55.762008905 CEST	53	40567	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:55.764343023 CEST	32996	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:55.773215055 CEST	53	32996	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:55.774848938 CEST	57770	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:55.783370018 CEST	53	57770	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:55.785078049 CEST	55283	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:55.793164015 CEST	53	55283	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:55.794215918 CEST	46637	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:41:55.803318024 CEST	53	46637	8.8.8.8	192.168.2.15
Oct 13, 2024 15:41:57.459248066 CEST	38177	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:58.030565023 CEST	5353	38177	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:58.033299923 CEST	49156	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:41:58.043237925 CEST	53	49156	116.203.104.203	192.168.2.15
Oct 13, 2024 15:41:58.045376062 CEST	46598	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:42:03.052997112 CEST	60183	5353	192.168.2.15	162.243.19.47
Oct 13, 2024 15:42:08.060802937 CEST	50437	53	192.168.2.15	161.97.219.84
Oct 13, 2024 15:42:08.245347023 CEST	53	50437	161.97.219.84	192.168.2.15
Oct 13, 2024 15:42:08.248080015 CEST	34740	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:08.254877090 CEST	53	34740	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:08.257221937 CEST	33774	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:08.264159918 CEST	53	33774	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:08.265892029 CEST	39732	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:08.273047924 CEST	53	39732	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:08.276071072 CEST	45360	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:08.282727003 CEST	53	45360	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:08.284943104 CEST	41141	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:08.291582108 CEST	53	41141	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:09.813775063 CEST	60942	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:42:09.821413040 CEST	53	60942	130.61.64.122	192.168.2.15
Oct 13, 2024 15:42:09.823105097 CEST	50536	53	192.168.2.15	116.203.104.203
Oct 13, 2024 15:42:09.833961010 CEST	53	50536	116.203.104.203	192.168.2.15
Oct 13, 2024 15:42:09.835772991 CEST	50117	53	192.168.2.15	192.3.165.37
Oct 13, 2024 15:42:09.939631939 CEST	53	50117	192.3.165.37	192.168.2.15
Oct 13, 2024 15:42:09.942075014 CEST	36213	5353	192.168.2.15	54.36.111.116
Oct 13, 2024 15:42:14.949556112 CEST	49751	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:42:14.957274914 CEST	53	49751	130.61.64.122	192.168.2.15
Oct 13, 2024 15:42:14.959332943 CEST	59274	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:14.966289043 CEST	53	59274	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:14.968158007 CEST	38043	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:14.974890947 CEST	53	38043	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:14.976444960 CEST	36766	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:14.983335972 CEST	53	36766	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:14.985055923 CEST	40128	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:14.991658926 CEST	53	40128	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:14.993350029 CEST	59104	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:15.000359058 CEST	53	59104	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:16.531124115 CEST	53491	5353	192.168.2.15	130.61.64.122
Oct 13, 2024 15:42:21.539556026 CEST	48024	5353	192.168.2.15	116.203.104.203
Oct 13, 2024 15:42:22.094757080 CEST	5353	48024	116.203.104.203	192.168.2.15
Oct 13, 2024 15:42:22.096851110 CEST	50321	5353	192.168.2.15	63.231.92.27
Oct 13, 2024 15:42:22.609491110 CEST	5353	50321	63.231.92.27	192.168.2.15
Oct 13, 2024 15:42:22.611490965 CEST	60013	53	192.168.2.15	130.61.64.122
Oct 13, 2024 15:42:22.618918896 CEST	53	60013	130.61.64.122	192.168.2.15
Oct 13, 2024 15:42:22.621141911 CEST	34746	53	192.168.2.15	162.243.19.47
Oct 13, 2024 15:42:22.715114117 CEST	53	34746	162.243.19.47	192.168.2.15
Oct 13, 2024 15:42:22.716450930 CEST	43447	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:22.723098993 CEST	53	43447	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:22.724767923 CEST	43214	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:22.731241941 CEST	53	43214	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:22.732556105 CEST	45159	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:22.739257097 CEST	53	45159	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:22.740554094 CEST	35505	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:22.746866941 CEST	53	35505	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:22.748431921 CEST	46669	53	192.168.2.15	8.8.8.8
Oct 13, 2024 15:42:22.755045891 CEST	53	46669	8.8.8.8	192.168.2.15
Oct 13, 2024 15:42:24.231786013 CEST	56035	5353	192.168.2.15	162.243.19.47

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 15:39:04.495879889 CEST	54.36.111.116	192.168.2.15	6587	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:39:11.382085085 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:39:21.259124041 CEST	54.36.111.116	192.168.2.15	6587	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:40:09.043623924 CEST	54.36.111.116	192.168.2.15	6587	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:40:10.585026979 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:40:13.263828039 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:40:14.884350061 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable
Oct 13, 2024 15:41:12.550718069 CEST	54.36.111.116	192.168.2.15	6586	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 15:41:33.299143076 CEST	192.168.2.15	1.1.1.1	0xe0ec	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:33.299283028 CEST	192.168.2.15	1.1.1.1	0x1543	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 15:38:57.865520000 CEST	130.61.69.123	192.168.2.15	0x3908	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:11.376017094 CEST	116.203.104.203	192.168.2.15	0x3c3d	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:11.570575953 CEST	161.97.219.84	192.168.2.15	0x72c2	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:11.581091881 CEST	116.203.104.203	192.168.2.15	0xa344	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:13.098186970 CEST	185.84.81.194	192.168.2.15	0xd00d	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:21.148296118 CEST	185.84.81.194	192.168.2.15	0x8ae3	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:21.253103971 CEST	192.3.165.37	192.168.2.15	0x7d5a	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:30.157577038 CEST	161.97.219.84	192.168.2.15	0xb579	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:30.169017076 CEST	116.203.104.203	192.168.2.15	0x1932	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:39:50.789597034 CEST	162.243.19.47	192.168.2.15	0x8fa1	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:08.847558022 CEST	130.61.69.123	192.168.2.15	0x331	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:13.105420113 CEST	130.61.69.123	192.168.2.15	0x2007	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:13.278950930 CEST	185.84.81.194	192.168.2.15	0xcdf3	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:13.293807983 CEST	116.203.104.203	192.168.2.15	0x5970	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:24.059698105 CEST	130.61.64.122	192.168.2.15	0xc523	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:39.762470007 CEST	162.243.19.47	192.168.2.15	0xe136	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:40:44.783970118 CEST	116.203.104.203	192.168.2.15	0x5b8c	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:24.227551937 CEST	192.3.165.37	192.168.2.15	0x5f78	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:26.501560926 CEST	161.97.219.84	192.168.2.15	0xe158	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:33.306797981 CEST	1.1.1.1	192.168.2.15	0xe0ec	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:33.306797981 CEST	1.1.1.1	192.168.2.15	0xe0ec	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:34.881418943 CEST	185.84.81.194	192.168.2.15	0x698e	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:50.157093048 CEST	116.203.104.203	192.168.2.15	0x985a	Format error (1)	nineteen.libre	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:50.171070099 CEST	116.203.104.203	192.168.2.15	0x9622	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:41:58.043237925 CEST	116.203.104.203	192.168.2.15	0xad06	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false
Oct 13, 2024 15:42:09.833961010 CEST	116.203.104.203	192.168.2.15	0xf8c8	Format error (1)	eighteen.pirate	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.15	33256	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:38:56.244415045 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:38:56.742455959 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.15	33258	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:03.015188932 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:03.488390923 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.15	33260	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:09.745436907 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:10.218095064 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.15	33262	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:11.621481895 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:12.086316109 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.15	33264	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:19.651932001 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:20.136539936 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.15	33266	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:22.424175024 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:22.888942957 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.15	33268	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:30.213295937 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:30.696497917 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.15	33270	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:44.029268026 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:44.498254061 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.15	33272	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:55.859004974 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:56.342303991 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.15	33274	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:39:58.566560984 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:39:59.030689001 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.15	33276	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:06.779216051 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:07.253571033 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.15	33278	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:09.095781088 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:09.561306000 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.15	33280	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:11.597017050 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:12.093089104 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.15	33282	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:13.350672007 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:13.872884035 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.15	33284	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:22.559427977 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:23.029295921 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.15	33286	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:29.690680027 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:30.164978981 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.15	33288	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:32.974329948 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:33.468527079 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.15	33290	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:44.834994078 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:45.301266909 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.15	33292	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:40:52.505738020 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:40:52.999353886 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.15	33294	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:05.349253893 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:05.814471960 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.15	33296	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:12.607768059 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:13.090962887 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.15	33298	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:24.841367006 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:25.306749105 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.15	33300	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:27.706593037 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:28.191231966 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.15	33302	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:35.482584000 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:36.045248985 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.15	33304	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:48.648533106 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:49.127418041 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.15	33306	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:41:55.810914993 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:41:56.452491999 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.15	33308	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:42:08.298459053 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:42:08.808871031 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.15	33310	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:42:15.007126093 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:42:15.525686979 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.15	33312	199.59.243.227	80

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 15:42:22.761363983 CEST	20	OUT	Data Raw: 66 75 63 6b 01 32 ff ff Data Ascii: fuck2
Oct 13, 2024 15:42:23.227483034 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

System Behavior

Analysis Process: na.elf PID: 5854, Parent PID: 5779

General

Start time (UTC):	13:38:47
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: na.elf PID: 5856, Parent PID: 5854

General

Start time (UTC):	13:38:48
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: na.elf PID: 5858, Parent PID: 5854

General

Start time (UTC):	13:38:48
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: na.elf PID: 5860, Parent PID: 5854

General

Start time (UTC):	13:38:48
Start date (UTC):	13/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: na.elf PID: 5854, Parent PID: 5779

General

Chronological Activities

Analysis Process: na.elf PID: 5856, Parent PID: 5854

General

Chronological Activities

Analysis Process: na.elf PID: 5858, Parent PID: 5854

General

Chronological Activities

Analysis Process: na.elf PID: 5860, Parent PID: 5854

General

Chronological Activities

Linux Analysis Report
na.elf