Sources Count % cum% ---------- --------- ------ ------ 10.0.2.200 73698 100.0 100.0 Destinations Count % cum% ------------ --------- ------ ------ 8.8.8.8 53486 72.6 72.6 8.8.4.4 20212 27.4 100.0 Query Type Count % cum% ---------- --------- ------ ------ A? 55482 75.3 75.3 MX? 17811 24.2 99.5 AAAA? 347 0.5 99.9 #0? 58 0.1 100.0 Opcode Count % cum% ------ --------- ------ ------ Query 73698 100.0 100.0 Rcode Count % cum% ------- --------- ------ ------ Noerror 73698 100.0 100.0 Query Name Count % cum% ---------- --------- ------ ------ com 59904 81.3 81.3 net 7479 10.1 91.4 eu 2247 3.0 94.5 us 1428 1.9 96.4 tf 550 0.7 97.2 fr 519 0.7 97.9 yt 515 0.7 98.6 ca 429 0.6 99.1 uk 70 0.1 99.2 ru 63 0.1 99.3 biz 58 0.1 99.4 . 57 0.1 99.5 de 51 0.1 99.6 org 42 0.1 99.6 nl 16 0.0 99.6 br 13 0.0 99.7 gov 12 0.0 99.7 jp 12 0.0 99.7 pt 11 0.0 99.7 130 10 0.0 99.7 229 10 0.0 99.7 es 10 0.0 99.7 be 9 0.0 99.8 invalid 9 0.0 99.8 au 9 0.0 99.8 edu 8 0.0 99.8 at 8 0.0 99.8 fi 8 0.0 99.8 kr 7 0.0 99.8 io 7 0.0 99.8 co 7 0.0 99.8 dk 7 0.0 99.8 tn 7 0.0 99.9 ch 7 0.0 99.9 sg 6 0.0 99.9 cl 6 0.0 99.9 za 6 0.0 99.9 cn 5 0.0 99.9 se 5 0.0 99.9 it 5 0.0 99.9 hk 5 0.0 99.9 cz 5 0.0 99.9 ph 4 0.0 99.9 my 4 0.0 99.9 gr 3 0.0 99.9 ua 3 0.0 99.9 no 3 0.0 99.9 tr 3 0.0 100.0 il 3 0.0 100.0 by 3 0.0 100.0 Query Name Count % cum% --------------------- --------- ------ ------ google.com 19035 25.8 25.8 logicdrift.com 2120 2.9 28.7 dropbox.com 1405 1.9 30.6 outlook.com 1342 1.8 32.4 strongaliar.eu 1121 1.5 34.0 microsoft.com 1111 1.5 35.5 initialink.com 992 1.3 36.8 larwood.net 956 1.3 38.1 msftncsi.com 905 1.2 39.3 vineriadana.com 897 1.2 40.5 bookeranto.com 654 0.9 41.4 messagelabs.com 616 0.8 42.3 pphosted.com 573 0.8 43.1 xulevil.eu 563 0.8 43.8 popularswat.eu 554 0.8 44.6 minitoons01.tf 550 0.7 45.3 godaddy.com 538 0.7 46.0 deehiesei.com 532 0.7 46.8 solidarepapero.com 525 0.7 47.5 offermarket.net 521 0.7 48.2 greyscrolling.com 516 0.7 48.9 narbit.com 515 0.7 49.6 minitoons01.yt 515 0.7 50.3 minitoons01.us 513 0.7 51.0 foundingcast.com 513 0.7 51.7 mafoovoo.com 512 0.7 52.4 omniglobe.net 510 0.7 53.1 strongaliar.us 510 0.7 53.8 geeseazei.net 509 0.7 54.4 dringeraout.com 509 0.7 55.1 strongaliar.fr 508 0.7 55.8 dietoog.com 507 0.7 56.5 svenorta.com 507 0.7 57.2 broilerona.com 466 0.6 57.8 mediajet.net 453 0.6 58.4 googlemail.com 449 0.6 59.1 firstkey.net 447 0.6 59.7 sehertlece.com 431 0.6 60.2 secureserver.net 339 0.5 60.7 gstatic.com 332 0.5 61.2 aol.com 283 0.4 61.5 rr.com 270 0.4 61.9 mimecast.com 259 0.4 62.3 emailsrvr.com 246 0.3 62.6 mxlogic.net 233 0.3 62.9 sithettetold.com 217 0.3 63.2 iphmx.com 206 0.3 63.5 arsmtp.com 200 0.3 63.8 gmail.com 199 0.3 64.0 barracudanetworks.com 197 0.3 64.3 Query Name Count % cum% ----------------------------- --------- ------ ------ clients4.google.com 5156 7.0 7.0 safebrowsing.google.com 4820 6.5 13.5 safebrowsing-cache.google.com 4706 6.4 19.9 logicdrift.com 2120 2.9 22.8 l.google.com 1950 2.6 25.4 clients2.google.com 1299 1.8 27.2 client.dropbox.com 1271 1.7 28.9 protection.outlook.com 1208 1.6 30.6 strongaliar.eu 1121 1.5 32.1 crl.microsoft.com 1063 1.4 33.5 tools.google.com 1041 1.4 34.9 initialink.com 992 1.3 36.3 larwood.net 956 1.3 37.6 dns.msftncsi.com 905 1.2 38.8 vineriadana.com 897 1.2 40.0 bookeranto.com 654 0.9 40.9 xulevil.eu 563 0.8 41.7 popularswat.eu 554 0.8 42.4 minitoons01.tf 550 0.7 43.2 ocsp.godaddy.com 538 0.7 43.9 deehiesei.com 532 0.7 44.6 solidarepapero.com 525 0.7 45.3 offermarket.net 521 0.7 46.1 greyscrolling.com 516 0.7 46.8 narbit.com 515 0.7 47.5 minitoons01.yt 515 0.7 48.2 minitoons01.us 513 0.7 48.8 foundingcast.com 513 0.7 49.5 mafoovoo.com 512 0.7 50.2 omniglobe.net 510 0.7 50.9 strongaliar.us 510 0.7 51.6 geeseazei.net 509 0.7 52.3 dringeraout.com 509 0.7 53.0 strongaliar.fr 508 0.7 53.7 dietoog.com 507 0.7 54.4 svenorta.com 507 0.7 55.1 broilerona.com 466 0.6 55.7 gslb.pphosted.com 457 0.6 56.3 mediajet.net 453 0.6 56.9 firstkey.net 447 0.6 57.5 us.messagelabs.com 442 0.6 58.1 sehertlece.com 431 0.6 58.7 www.gstatic.com 316 0.4 59.2 smtp.secureserver.net 224 0.3 59.5 sithettetold.com 217 0.3 59.8 aspmx2.googlemail.com 213 0.3 60.0 ess.barracudanetworks.com 197 0.3 60.3 mx.aol.com 193 0.3 60.6 gmail.com 192 0.3 60.8 aspmx3.googlemail.com 174 0.2 61.1 Query Name Count % cum% ----------------------------- --------- ------ ------ clients4.google.com 5156 7.0 7.0 safebrowsing.google.com 4820 6.5 13.5 safebrowsing-cache.google.com 4706 6.4 19.9 logicdrift.com 2120 2.9 22.8 aspmx.l.google.com 1709 2.3 25.1 clients2.google.com 1299 1.8 26.9 client.dropbox.com 1271 1.7 28.6 mail.protection.outlook.com 1208 1.6 30.2 strongaliar.eu 1121 1.5 31.8 crl.microsoft.com 1063 1.4 33.2 tools.google.com 1041 1.4 34.6 initialink.com 992 1.3 36.0 larwood.net 956 1.3 37.3 dns.msftncsi.com 905 1.2 38.5 vineriadana.com 897 1.2 39.7 bookeranto.com 654 0.9 40.6 xulevil.eu 563 0.8 41.4 popularswat.eu 554 0.8 42.1 minitoons01.tf 550 0.7 42.9 ocsp.godaddy.com 538 0.7 43.6 deehiesei.com 532 0.7 44.3 solidarepapero.com 525 0.7 45.0 offermarket.net 521 0.7 45.7 greyscrolling.com 516 0.7 46.4 narbit.com 515 0.7 47.1 minitoons01.yt 515 0.7 47.8 minitoons01.us 513 0.7 48.5 foundingcast.com 513 0.7 49.2 mafoovoo.com 512 0.7 49.9 omniglobe.net 510 0.7 50.6 strongaliar.us 510 0.7 51.3 geeseazei.net 509 0.7 52.0 dringeraout.com 509 0.7 52.7 strongaliar.fr 508 0.7 53.4 dietoog.com 507 0.7 54.1 svenorta.com 507 0.7 54.7 broilerona.com 466 0.6 55.4 mediajet.net 453 0.6 56.0 firstkey.net 447 0.6 56.6 sehertlece.com 431 0.6 57.2 www.gstatic.com 316 0.4 57.6 gmail-smtp-in.l.google.com 241 0.3 57.9 smtp.secureserver.net 224 0.3 58.2 sithettetold.com 217 0.3 58.5 aspmx2.googlemail.com 213 0.3 58.8 gmail.com 192 0.3 59.1 aspmx3.googlemail.com 174 0.2 59.3 mx1.emailsrvr.com 171 0.2 59.6 passpace.com 170 0.2 59.8 com.inbound10.mxlogic.net 154 0.2 60.0 Source Query Name Count % cum% ---------- ---------- --------- ------ ------ 10.0.2.200 com 59904 81.3 81.3 10.0.2.200 net 7479 10.1 91.4 10.0.2.200 eu 2247 3.0 94.5 10.0.2.200 us 1428 1.9 96.4 10.0.2.200 tf 550 0.7 97.2 10.0.2.200 fr 519 0.7 97.9 10.0.2.200 yt 515 0.7 98.6 10.0.2.200 ca 429 0.6 99.1 10.0.2.200 uk 70 0.1 99.2 10.0.2.200 ru 63 0.1 99.3 10.0.2.200 biz 58 0.1 99.4 10.0.2.200 . 57 0.1 99.5 10.0.2.200 de 51 0.1 99.6 10.0.2.200 org 42 0.1 99.6 10.0.2.200 nl 16 0.0 99.6 10.0.2.200 br 13 0.0 99.7 10.0.2.200 gov 12 0.0 99.7 10.0.2.200 jp 12 0.0 99.7 10.0.2.200 pt 11 0.0 99.7 10.0.2.200 130 10 0.0 99.7 10.0.2.200 229 10 0.0 99.7 10.0.2.200 es 10 0.0 99.7 10.0.2.200 be 9 0.0 99.8 10.0.2.200 invalid 9 0.0 99.8 10.0.2.200 au 9 0.0 99.8 10.0.2.200 edu 8 0.0 99.8 10.0.2.200 at 8 0.0 99.8 10.0.2.200 fi 8 0.0 99.8 10.0.2.200 kr 7 0.0 99.8 10.0.2.200 io 7 0.0 99.8 10.0.2.200 co 7 0.0 99.8 10.0.2.200 dk 7 0.0 99.8 10.0.2.200 tn 7 0.0 99.9 10.0.2.200 ch 7 0.0 99.9 10.0.2.200 sg 6 0.0 99.9 10.0.2.200 cl 6 0.0 99.9 10.0.2.200 za 6 0.0 99.9 10.0.2.200 cn 5 0.0 99.9 10.0.2.200 se 5 0.0 99.9 10.0.2.200 it 5 0.0 99.9 10.0.2.200 hk 5 0.0 99.9 10.0.2.200 cz 5 0.0 99.9 10.0.2.200 ph 4 0.0 99.9 10.0.2.200 my 4 0.0 99.9 10.0.2.200 gr 3 0.0 99.9 10.0.2.200 ua 3 0.0 99.9 10.0.2.200 no 3 0.0 99.9 10.0.2.200 tr 3 0.0 100.0 10.0.2.200 il 3 0.0 100.0 10.0.2.200 by 3 0.0 100.0 Source Query Name Count % cum% ---------- --------------------- --------- ------ ------ 10.0.2.200 google.com 19035 25.8 25.8 10.0.2.200 logicdrift.com 2120 2.9 28.7 10.0.2.200 dropbox.com 1405 1.9 30.6 10.0.2.200 outlook.com 1342 1.8 32.4 10.0.2.200 strongaliar.eu 1121 1.5 34.0 10.0.2.200 microsoft.com 1111 1.5 35.5 10.0.2.200 initialink.com 992 1.3 36.8 10.0.2.200 larwood.net 956 1.3 38.1 10.0.2.200 msftncsi.com 905 1.2 39.3 10.0.2.200 vineriadana.com 897 1.2 40.5 10.0.2.200 bookeranto.com 654 0.9 41.4 10.0.2.200 messagelabs.com 616 0.8 42.3 10.0.2.200 pphosted.com 573 0.8 43.1 10.0.2.200 xulevil.eu 563 0.8 43.8 10.0.2.200 popularswat.eu 554 0.8 44.6 10.0.2.200 minitoons01.tf 550 0.7 45.3 10.0.2.200 godaddy.com 538 0.7 46.0 10.0.2.200 deehiesei.com 532 0.7 46.8 10.0.2.200 solidarepapero.com 525 0.7 47.5 10.0.2.200 offermarket.net 521 0.7 48.2 10.0.2.200 greyscrolling.com 516 0.7 48.9 10.0.2.200 narbit.com 515 0.7 49.6 10.0.2.200 minitoons01.yt 515 0.7 50.3 10.0.2.200 minitoons01.us 513 0.7 51.0 10.0.2.200 foundingcast.com 513 0.7 51.7 10.0.2.200 mafoovoo.com 512 0.7 52.4 10.0.2.200 omniglobe.net 510 0.7 53.1 10.0.2.200 strongaliar.us 510 0.7 53.8 10.0.2.200 geeseazei.net 509 0.7 54.4 10.0.2.200 dringeraout.com 509 0.7 55.1 10.0.2.200 strongaliar.fr 508 0.7 55.8 10.0.2.200 dietoog.com 507 0.7 56.5 10.0.2.200 svenorta.com 507 0.7 57.2 10.0.2.200 broilerona.com 466 0.6 57.8 10.0.2.200 mediajet.net 453 0.6 58.4 10.0.2.200 googlemail.com 449 0.6 59.1 10.0.2.200 firstkey.net 447 0.6 59.7 10.0.2.200 sehertlece.com 431 0.6 60.2 10.0.2.200 secureserver.net 339 0.5 60.7 10.0.2.200 gstatic.com 332 0.5 61.2 10.0.2.200 aol.com 283 0.4 61.5 10.0.2.200 rr.com 270 0.4 61.9 10.0.2.200 mimecast.com 259 0.4 62.3 10.0.2.200 emailsrvr.com 246 0.3 62.6 10.0.2.200 mxlogic.net 233 0.3 62.9 10.0.2.200 sithettetold.com 217 0.3 63.2 10.0.2.200 iphmx.com 206 0.3 63.5 10.0.2.200 arsmtp.com 200 0.3 63.8 10.0.2.200 gmail.com 199 0.3 64.0 10.0.2.200 barracudanetworks.com 197 0.3 64.3 Source Query Name Count % cum% ---------- ----------------------------- --------- ------ ------ 10.0.2.200 clients4.google.com 5156 7.0 7.0 10.0.2.200 safebrowsing.google.com 4820 6.5 13.5 10.0.2.200 safebrowsing-cache.google.com 4706 6.4 19.9 10.0.2.200 logicdrift.com 2120 2.9 22.8 10.0.2.200 l.google.com 1950 2.6 25.4 10.0.2.200 clients2.google.com 1299 1.8 27.2 10.0.2.200 client.dropbox.com 1271 1.7 28.9 10.0.2.200 protection.outlook.com 1208 1.6 30.6 10.0.2.200 strongaliar.eu 1121 1.5 32.1 10.0.2.200 crl.microsoft.com 1063 1.4 33.5 10.0.2.200 tools.google.com 1041 1.4 34.9 10.0.2.200 initialink.com 992 1.3 36.3 10.0.2.200 larwood.net 956 1.3 37.6 10.0.2.200 dns.msftncsi.com 905 1.2 38.8 10.0.2.200 vineriadana.com 897 1.2 40.0 10.0.2.200 bookeranto.com 654 0.9 40.9 10.0.2.200 xulevil.eu 563 0.8 41.7 10.0.2.200 popularswat.eu 554 0.8 42.4 10.0.2.200 minitoons01.tf 550 0.7 43.2 10.0.2.200 ocsp.godaddy.com 538 0.7 43.9 10.0.2.200 deehiesei.com 532 0.7 44.6 10.0.2.200 solidarepapero.com 525 0.7 45.3 10.0.2.200 offermarket.net 521 0.7 46.1 10.0.2.200 greyscrolling.com 516 0.7 46.8 10.0.2.200 narbit.com 515 0.7 47.5 10.0.2.200 minitoons01.yt 515 0.7 48.2 10.0.2.200 minitoons01.us 513 0.7 48.8 10.0.2.200 foundingcast.com 513 0.7 49.5 10.0.2.200 mafoovoo.com 512 0.7 50.2 10.0.2.200 omniglobe.net 510 0.7 50.9 10.0.2.200 strongaliar.us 510 0.7 51.6 10.0.2.200 geeseazei.net 509 0.7 52.3 10.0.2.200 dringeraout.com 509 0.7 53.0 10.0.2.200 strongaliar.fr 508 0.7 53.7 10.0.2.200 dietoog.com 507 0.7 54.4 10.0.2.200 svenorta.com 507 0.7 55.1 10.0.2.200 broilerona.com 466 0.6 55.7 10.0.2.200 gslb.pphosted.com 457 0.6 56.3 10.0.2.200 mediajet.net 453 0.6 56.9 10.0.2.200 firstkey.net 447 0.6 57.5 10.0.2.200 us.messagelabs.com 442 0.6 58.1 10.0.2.200 sehertlece.com 431 0.6 58.7 10.0.2.200 www.gstatic.com 316 0.4 59.2 10.0.2.200 smtp.secureserver.net 224 0.3 59.5 10.0.2.200 sithettetold.com 217 0.3 59.8 10.0.2.200 aspmx2.googlemail.com 213 0.3 60.0 10.0.2.200 ess.barracudanetworks.com 197 0.3 60.3 10.0.2.200 mx.aol.com 193 0.3 60.6 10.0.2.200 gmail.com 192 0.3 60.8 10.0.2.200 aspmx3.googlemail.com 174 0.2 61.1 Source Query Name Count % cum% ---------- ----------------------------- --------- ------ ------ 10.0.2.200 clients4.google.com 5156 7.0 7.0 10.0.2.200 safebrowsing.google.com 4820 6.5 13.5 10.0.2.200 safebrowsing-cache.google.com 4706 6.4 19.9 10.0.2.200 logicdrift.com 2120 2.9 22.8 10.0.2.200 aspmx.l.google.com 1709 2.3 25.1 10.0.2.200 clients2.google.com 1299 1.8 26.9 10.0.2.200 client.dropbox.com 1271 1.7 28.6 10.0.2.200 mail.protection.outlook.com 1208 1.6 30.2 10.0.2.200 strongaliar.eu 1121 1.5 31.8 10.0.2.200 crl.microsoft.com 1063 1.4 33.2 10.0.2.200 tools.google.com 1041 1.4 34.6 10.0.2.200 initialink.com 992 1.3 36.0 10.0.2.200 larwood.net 956 1.3 37.3 10.0.2.200 dns.msftncsi.com 905 1.2 38.5 10.0.2.200 vineriadana.com 897 1.2 39.7 10.0.2.200 bookeranto.com 654 0.9 40.6 10.0.2.200 xulevil.eu 563 0.8 41.4 10.0.2.200 popularswat.eu 554 0.8 42.1 10.0.2.200 minitoons01.tf 550 0.7 42.9 10.0.2.200 ocsp.godaddy.com 538 0.7 43.6 10.0.2.200 deehiesei.com 532 0.7 44.3 10.0.2.200 solidarepapero.com 525 0.7 45.0 10.0.2.200 offermarket.net 521 0.7 45.7 10.0.2.200 greyscrolling.com 516 0.7 46.4 10.0.2.200 narbit.com 515 0.7 47.1 10.0.2.200 minitoons01.yt 515 0.7 47.8 10.0.2.200 minitoons01.us 513 0.7 48.5 10.0.2.200 foundingcast.com 513 0.7 49.2 10.0.2.200 mafoovoo.com 512 0.7 49.9 10.0.2.200 omniglobe.net 510 0.7 50.6 10.0.2.200 strongaliar.us 510 0.7 51.3 10.0.2.200 geeseazei.net 509 0.7 52.0 10.0.2.200 dringeraout.com 509 0.7 52.7 10.0.2.200 strongaliar.fr 508 0.7 53.4 10.0.2.200 dietoog.com 507 0.7 54.1 10.0.2.200 svenorta.com 507 0.7 54.7 10.0.2.200 broilerona.com 466 0.6 55.4 10.0.2.200 mediajet.net 453 0.6 56.0 10.0.2.200 firstkey.net 447 0.6 56.6 10.0.2.200 sehertlece.com 431 0.6 57.2 10.0.2.200 www.gstatic.com 316 0.4 57.6 10.0.2.200 gmail-smtp-in.l.google.com 241 0.3 57.9 10.0.2.200 smtp.secureserver.net 224 0.3 58.2 10.0.2.200 sithettetold.com 217 0.3 58.5 10.0.2.200 aspmx2.googlemail.com 213 0.3 58.8 10.0.2.200 gmail.com 192 0.3 59.1 10.0.2.200 aspmx3.googlemail.com 174 0.2 59.3 10.0.2.200 mx1.emailsrvr.com 171 0.2 59.6 10.0.2.200 passpace.com 170 0.2 59.8 10.0.2.200 com.inbound10.mxlogic.net 154 0.2 60.0